Description
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.
References
- 17648 vdb-entry
- 20060421 Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows mailing-list
- http://www.rapid7.com/advisories/R7-0019.html
- tftp-dotdotdotdot-directory-traversal(25969) vdb-entry
- 20060421 Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows mailing-list
- ADV-2006-1561 vdb-entry
- 19848 third-party-advisory
- 778 third-party-advisory