Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-10011. PoCs published by chr1x.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Acritum Femitter HTTP-FTP Server, allowing unauthorized access to files outside the intended directory via crafted FTP requests. The PoC uses the DotDotPwn tool to fuzz and retrieve the 'boot.ini' file from the system root.
Description
A vulnerability, which was classified as problematic, was found in Acritum Femitter Server 1.04. Affected is an unknown function. The manipulation leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250446 is the identifier assigned to this vulnerability.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Acritum Femitter HTTP-FTP Server, allowing unauthorized access to files outside the intended directory via crafted FTP requests. The PoC uses the DotDotPwn tool to fuzz and retrieve the 'boot.ini' file from the system root.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N