CVE-2002-1562: Acme Labs Thttpd

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.

Affected products

Published 2003-05-12. Last modified 2026-06-16.