Description
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.
References
- ADV-2006-1562 vdb-entry
- 17718 vdb-entry
- tftp-dotdotdot-directory-traversal(25971) vdb-entry
- http://www.rapid7.com/advisories/R7-0020.html
- http://www.winagents.com/en/news/410.php
- 19844 third-party-advisory