COMMAND Abyss httpd administration password file retrieval SYSTEMS AFFECTED Abyss Webserver 1.0 PROBLEM In NETCRA$H SECURITY REPORT [http://www26.brinkster.com/netcrash/] : Request to get the password file just by breaking WWWROOT using Unicode : http://127.0.0.1/cgi-bin/%2e%2e/abyss.conf SOLUTION See http://www.aprelium.com for patch.