CVE-2001-0892 Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing....
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acme thttpd | <= 2.22 | No fix listed |
References
- 20011113 Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln mailing-list third-party-advisory
- www.acme.com release-notes