Multiple OSU httpd security vulnerabilities

Physical path and directory content disclosure...