CVE-2007-0664

thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory / by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files...

CVE-2007-0664

CVE-2007-0664 affects thttpd prior to 2.25b-r6 when started from the system root (/) by Gentoo baselayout 1.12.6, causing the web server root to be "/" and enabling remote attackers to read arbitrary files. The underlying change to start-stop-daemon is cited in Gentoo GLSA 200701-28 and related a...