CVE-2001-0893 Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acme mini httpd | <= 1.16 | No fix listed |
References
- 20011113 Cgisecurity.com Advisory #6: thttpd and mini_http Permission bypass vuln mailing-list third-party-advisory
- www.acme.com vendor-advisory
- httpd-bypass-permissions(7541) url-repurposed vdb-entry