Security Advisory
CVE-2001-0892
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.