Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request…
mitre·CWE-668·Published 2001-11-13