CVE-2007-0664
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the...
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
Exploit likelihood
What each source reports
NVD Score used
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
- Record
CVE-2007-0664- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
- Record
CVE-2007-0664- Updated
- 2026-11-02
EUVDEUVD-2007-0661 No score
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
- Record
EUVD-2007-0661- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cfx5-4q9c-778g No score
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the...
thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 package, which allows remote attackers to read arbitrary files.
- Record
GHSA-cfx5-4q9c-778g- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0664 is a medium vulnerability (CVSS 5.0) in Acme Labs Thttpd, published February 2, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.95%, the 87th percentile. No source names a fixed version.
References
bugs.gentoo.org/show_bug.cgi?id=142047
secunia.com/advisories/24018
osvdb.org/31965
securityfocus.com/bid/22349
gentoo.org/security/en/glsa/glsa-200701-28.xml
seclists.org/fulldisclosure/2023/Nov/13
packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
nvd.nist.gov/vuln/detail/CVE-2007-0664
github.com/advisories/GHSA-cfx5-4q9c-778g