Acritum Femitter Server is prone to multiple remote vulnerabilities, including: - An authentication-bypass vulnerability - An arbitrary file-download vulnerability - A directory-traversal vulnerability - An arbitrary file-upload vulnerability Exploiting this issue will allow an attacker to gain access to sensitive information, upload arbitrary files, download arbitrary files, and execute arbitrary code within context of the affected server. Other attacks are also possible. Acritum Femitter Server 1.03 is vulnerable other versions may also be affected.

• http://www.acritum.com/fem/index.htm
• http://www.securityfocus.com/bid/39868

---

Updated on 2015-03-25