COMMAND

	LocalWEB2000 local file disclosure

SYSTEMS AFFECTED

	version 2.1.0

PROBLEM

	Tamer Sahin [http://www.securityoffice.net] found that  LocalWEB2000,  a
	web   server   for   win2000   [http://www.intranet-server.co.uk],    is
	vulnerable to local file disclosure.
	

	 Exploit

	 =======

	

	http://host/./protectedfolder/protectedfile.htm
	

	

	

	

SOLUTION

	Contact vendor