sthttps[1], a fork of thttpd, a small, fast, multiplexing webserver.
creates its log as world-redable:
# ls -la /var/log/thttpd.log
-rw-r--r-- 1 thttpd thttpd 0 Feb 22 14:05 /var/log/thttpd.log
It should be only gentoo-related because the log is created by our own init-
script. Please assign a CVE.
[1]: http://opensource.dyc.edu/sthttpd
--
Agostino Sarubbo
Gentoo Linux Developer
↧
sthttpd world-redable logdir
↧