Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.802623
Category:Remote file access
Title:Distinct TFTP Server Directory Traversal Vulnerability
Summary:This host is running Distinct TFTP Server and is prone to; directory traversal vulnerability.
Description:Summary:
This host is running Distinct TFTP Server and is prone to
directory traversal vulnerability.

Vulnerability Insight:
The flaw is caused due an input validation error within the TFTP
service and can be exploited to download or manipulate files in arbitrary locations outside the
TFTP root via specially crafted directory traversal sequences.

Vulnerability Impact:
Successful exploitation allows an attacker to obtain sensitive
information and launch further attacks.

Affected Software/OS:
Distinct TFTP Server version 3.01 and prior.

Solution:
Upgrade to Distinct TFTP Server version 3.11 or later.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Cross-Ref: BugTraq ID: 52938
CopyrightCopyright (C) 2012 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.