Unscored CVE-2001-0783 EUVD-2001-0768GHSA-jpc6-v6xg-2hrr

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.

Published Oct 12, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.

References

http://www.sentry-labs.com/files/cisco0201061701.txt
2886 vdb-entry
20010618 Cisco TFTPD 1.1 Vulerablity mailing-list
cisco-tftp-directory-traversal(6722) vdb-entry