| Package | Affected versions | Patched versions |
|---|---|---|
| thttpd | = 2.25 | |
| sthttpd | = 2.26= 2.26.1= 2.26.2= 2.26.3≤ 2.26.4 |
thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obtain sensitive information by reading the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free