RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters.
https://exchange.xforce.ibmcloud.com/vulnerabilities/25037
http://www.vupen.com/english/advisories/2006/0807
http://www.securityfocus.com/bid/16934