Description
Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname.
References
- 20080303 DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability mailing-list
- pt360-tftpserver-directory-traversal(40979) vdb-entry
- 29207 third-party-advisory
- 28078 vdb-entry
- http://www.emediawire.com/releases/2008/2/prweb731563.htm
- http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt