Exploit RaidenHTTPD 1.1.27 - Remote File Disclosure

[Exploiter]

EDB-ID

25083

Проверка EDB

1. Пройдено

Автор

DONATO FERRANTE

Тип уязвимости

DOS

Платформа

WINDOWS

CVE

null

Дата публикации

2005-02-05

source: https://www.securityfocus.com/bid/12451/info

RaidenHTTPD is reported prone to a remote file disclosure vulnerability. It is reported that the service does not correctly handle requests for restricted files that reside outside of the web document root folder.

A remote attacker may exploit this issue to disclose the contents of web server readable files.

GET windows/system.ini HTTP/1.1
Host: localhost