CVE-2002-2076

CVE-2002-2076 pertains to the Lil’ HTTP server (versions 2.1 and 2.2). The connected sources confirm a directory traversal vulnerability that allows remote attackers to read arbitrary files by including a .. (dot dot) in an HTTP GET request. The root cause is input/path traversal handling in the ...