Secunia Research 03/04/2006 – AN HTTPD Script Source Disclosure Vulnerability – The vulnerability is caused due to a validation error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files (e.g. PL, CGI, and BAT) from the server via specially crafted requests containing dot and space characters.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45227/secunia-an-httpd.txt
Source: https://packetstormsecurity.com/files/45227/secunia-an-httpd.txt.html