Vulnerability in Acme Thttpd
CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
EPSS: 0.019 (76.9th percentile) — read the EPSS interpretation.
Affected products
- Acme Thttpd
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes)