Detailed analysis of security vulnerabilities
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.