CVE-2005-3124: Acme Labs Thttpd

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.

Affected products

• Acme Labs Thttpd: version 2.21b only; version 2.23b1 only

Published 2005-11-06. Last modified 2026-06-16.