Re: Fwd: [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability

[Tavis Ormandy <taviso () cmpxchg8b com>]

Matthias Weckbecker wrote:

> Hi,
>
> has anybody possibly already confirmed this? It might also be worth to
> assign a CVE to this if it turns out to be a reproducible issue.

I can't reproduce here.

It's probably not a good sign that he posted some non-shadow passwords in
the output :)

Tavis.


-- 
-------------------------------------
taviso () cmpxchg8b com | pgp encrypted mail preferred
-------------------------------------------------------