Sthttpd · Shttpd · CVE-2007-6404
**Name of the Vulnerable Software and Affected Versions**
shttpd versions 1.38 and earlier
**Description**
A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot backslash) in the URI.
**Recommendations**
For shttpd versions 1.38 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.