CVE-2011-4716

The provided text describes a local file disclosure vulnerability in DreamBox DM800 versions 1.5rc1 and prior. It lacks executable exploit code, instead offering a generic URL pattern for exploitation.

This exploit demonstrates an arbitrary file download vulnerability in DreamBox DM800 via directory traversal in the HTTP GET method. It allows attackers to access sensitive files like /etc/shadow without authentication.

This Perl script exploits a remote file disclosure vulnerability in DreamBox DM800 <= 1.5rc1 by sending a crafted HTTP request to retrieve arbitrary files from the target device. The exploit leverages a path traversal flaw in the web interface to read sensitive files like /etc/passwd.