Solution : https://service.sap.com/sap/support/notes/658464 (SAP Service marketplace login required)
Key words : 
- config tool => cluster/server => services => dirlist = false  - restart j2ee server-, user interfacemight enable user input, ipc configuration support guide chapter, http based file browsing, /crm-inst -> sap crm 4, sap j2ee engine security, microsoft internet information server, j2ee engine directory, server settings page, accept user input
Related Notes : 
       
| 720523 | IPC security: Maintaining params for SSL secured connections | 
| 698181 | IPC security: Maintaining parameters for SNC-RFC connections | 
| 675125 | Securing files containing sensitive data | 
| 675043 | Security: IIS Security with Microsoft tools | 
| 672421 | IPC security: Maintaining the security level | 
| 669883 | SCE: User entries for attribute with 'not ready for input' | 
| 658437 | IPC security: Restricting access rights on IPC directory | 
| 646205 | Standard logging in IPC 3.0 SP17 | 
| 646140 | Security Check of Internet Sales | 
| 606733 | |
| 421480 | IPC: Activating the IPC server log | 
| 412309 |