nostromo nhttpd Web Server Remote Directory Traversal Vulnerability
Description
A vulnerability has been identified in nostromo nhttpd, which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system or execute arbitrary code. This issue is caused by an input validation error when processing HTTP requests containing the "..%2f" sequence, which could be exploited to conduct directory traversal attacks and disclose the contents of arbitrary files, or inject and execute arbitrary shell commands.
Vulnerable Products
Vulnerable Software: nostromo nhttpd version 1.9.3 and prior
