MiniWeb Directory Traversal and Buffer Overflow

MiniWeb is "a mini HTTP server implementation written in C language, featuring low system resource consumption, high efficiency, good flexibility and high portability". Two vulnerabilities have been discovered in MiniWeb, these allow a remote attacker to either cause the product to execute arbitrary code through the overflowing of an internal buffer, to access files that reside outside the bounding HTML root directory via a directory traversal vulnerability.

http://www.securiteam.com/windowsntf...IP0M0AN5E.html