CVEs-PoC/2007/CVE-2007-0664.md

CVE-2007-0664

Description

thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.

POC

Reference

• http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
• http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
• http://seclists.org/fulldisclosure/2023/Nov/13
• http://seclists.org/fulldisclosure/2023/Nov/13

Github

No PoCs found on GitHub currently.