If thttpd is started from system root, system root is used as web server root directory.
vulners.com/securityvulns/securityvulns:doc:15941