CVE-2003-1137: Charles Steinkuehler Sh-Httpd

Medium severity, CVSS 5.0. EPSS: 6.8% chance of exploitation in the next 30 days.

Charles Steinkuehler sh-httpd 0.3 and 0.4 allows remote attackers to read files or execute arbitrary CGI scripts via a GET request that contains an asterisk (*) wildcard character.

Affected products

• Charles Steinkuehler Sh-Httpd: version 0.3 only; version 0.4 only

Published 2003-10-27. Last modified 2026-06-16.