info
discussion
exploit
solution
references
Key Focus KF Web Server Directory Contents Disclosure Vulnerability
The following proof of concepts were provided by Securiteinfo.com <webmaster@securiteinfo.com>:
http://server_name/subdir/%00
http://server_name/%00
Privacy Statement
Copyright 2010, SecurityFocus