Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability

[Matthias Weckbecker <mweckbecker () suse de>]

Hi,

has anybody possibly already confirmed this? It might also be worth
to assign a CVE to this if it turns out to be a reproducible issue.

Thanks,
Matthias

----------  Forwarded Message  ----------

Subject: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability
Date: Sunday 19 May 2013
From: "metropolis haxor" <metrOpolis () linuxmail org>
To: full-disclosure () lists grok org uk

Hi guys,
You can find the software affected at 
http://www.acme.com/software/thttpd/thttpd-2.25b.tar.gz 
Thanks,
Metropolis

-------------------------------------------------------

-- 
Matthias Weckbecker, Senior Security Engineer, SUSE Security Team
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany
Tel: +49-911-74053-0;  http://suse.com/
SUSE LINUX Products GmbH, GF: Jeff Hawn, HRB 16746 (AG Nuernberg)

Attachment: Thttpd 2.25b Directory Traversal Vulnerability.txt
Description: Attachment: Thttpd 2.25b Directory Traversal Vulnerability.txt