Vulnerability Details CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.4%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2001-0892
-
-
cpe:2.3:a:acme:thttpd:1.90
-
cpe:2.3:a:acme:thttpd:1.95
-
cpe:2.3:a:acme:thttpd:2.00
-
cpe:2.3:a:acme:thttpd:2.01
-
cpe:2.3:a:acme:thttpd:2.02
-
cpe:2.3:a:acme:thttpd:2.03
-
cpe:2.3:a:acme:thttpd:2.04
-
cpe:2.3:a:acme:thttpd:2.05
-
cpe:2.3:a:acme:thttpd:2.06
-
cpe:2.3:a:acme:thttpd:2.07
-
cpe:2.3:a:acme:thttpd:2.08
-
cpe:2.3:a:acme:thttpd:2.09
-
cpe:2.3:a:acme:thttpd:2.10
-
cpe:2.3:a:acme:thttpd:2.11
-
cpe:2.3:a:acme:thttpd:2.12
-
cpe:2.3:a:acme:thttpd:2.13
-
cpe:2.3:a:acme:thttpd:2.14
-
cpe:2.3:a:acme:thttpd:2.15
-
cpe:2.3:a:acme:thttpd:2.16
-
cpe:2.3:a:acme:thttpd:2.17
-
cpe:2.3:a:acme:thttpd:2.18
-
cpe:2.3:a:acme:thttpd:2.19
-
cpe:2.3:a:acme:thttpd:2.20
-
cpe:2.3:a:acme:thttpd:2.21
-
cpe:2.3:a:acme:thttpd:2.22