COMMAND

	LilHTTP web server file retrieval

SYSTEMS AFFECTED

	Windows 2000 / LilHTTP Server 2.1

PROBLEM

	Tamer Sahin [http://www.securityoffice.net] found following :
	

	LilHTTP Web Server is very small yet powerfull Web Server.  This  server
	weighs in at just under 120k in size  as  a  stand-alone  EXE  file.  It
	features security, Server Side Includes  and  CGI  support.  LilHTTP  is
	very easy to configure and to setup. [http://www.summitcn.com]
	

	It is possible to construct a web request which is capable of  accessing
	the contents of password protected files/folders on the webserver.
	

	

	http://host/./protectedfolder/protectedfile.htm

	

	

SOLUTION

	 Update (21 March 2002)

	 ======

	

	Issue solved in release 2.2