CVE-2004-2628: Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote...

Security readout for executives and security teams

This CVE affects an old beta release of thttpd running on Windows. A remote user could request paths that escape the intended web directory and read arbitrary files from the server. The sources do not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to systems still running thttpd 2.07 beta 0.4 on Windows, especially if reachable over a network. Modern or non-Windows deployments are not identified as affected in the provided sources. Prioritize remediation if any Windows thttpd 2.07 beta 0.4 instance is internet-facing or hosts sensitive files. Otherwise, handle through legacy-system cleanup because the issue is old, narrowly scoped, and lacks active-exploitation evidence in the provided sources. Mitigation focus: Inventory Windows hosts for thttpd 2.07 beta 0.4.; Retire or replace affected beta deployments where possible.; Check ACME thttpd release notes for vendor-fixed versions or guidance..

Prepared

Jun 29, 2026, 16:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.