Description
Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.
References
- VU#211736 third-party-advisory
- alcatel-tftp-lan-access(6336) vdb-entry
- CA-2001-08 third-party-advisory