CVE-2001-0892: Acme Thttpd

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.

Affected products

• Acme Thttpd: up to and including 2.22

Published 2001-11-13. Last modified 2026-06-16.