Unrated severityNVD Advisory· Published Jul 3, 2001· Updated Jun 16, 2026

CVE-2001-1266

Description

Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.

Affected products

DNHTTPD/DNHTTPD
cpe:2.3:a:doug_neal:dnhttpd:0.4.1:*:*:*:*:*:*:*
DNHTTPD/HTTPD Daemon (DNHTTPD)llm-create
Range: <0.4.1

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.htmlnvdVendor Advisory
dnhttpd.sourceforge.net/changelog.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000