hellok · December 15, 2015 03:39
diff --git a/CVE-2013-1427 b/CVE-2013-1427
 http://cwe.mitre.org/data/definitions/377.html

 http://book.douban.com/subject/3030910/
 http://book.douban.com/subject/1775982/

 http://seclists.org/fulldisclosure/2013/Mar/153

 lighttpd is prone to an insecure temporary-file-creation vulnerability. 

 Local attackers may be able to perform symbolic-link attacks to overwrite arbitrary files in the context of the affected application. Other attacks may also be possible.

 example1：
 http://sourceforge.net/p/cscope/bugs/153/
 example2：
 http://www.exploit-db.com/exploits/9135/   GOOD！
 example3：
 https://www.cr0.org/misc/CVE-2009-2692.txt
 http://www.exploit-db.com/exploits/19933/
	http://cwe.mitre.org/data/definitions/377.html

	http://book.douban.com/subject/3030910/
	http://book.douban.com/subject/1775982/

	http://seclists.org/fulldisclosure/2013/Mar/153

	lighttpd is prone to an insecure temporary-file-creation vulnerability.

	Local attackers may be able to perform symbolic-link attacks to overwrite arbitrary files in the context of the affected application. Other attacks may also be possible.

	example1：
	http://sourceforge.net/p/cscope/bugs/153/
	example2：
	http://www.exploit-db.com/exploits/9135/ GOOD！
	example3：
	https://www.cr0.org/misc/CVE-2009-2692.txt
	http://www.exploit-db.com/exploits/19933/