htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 1.3.14 | 1.3.14.x |
| apache / http_server | 2.0-alpha9 | 2.0-alpha9.x |
| debian / debian_linux | 2.2 | 2.2.x |