Cisco TFTPD Server Directory Traversal Vulnerability
BID:2886
Info
Cisco TFTPD Server Directory Traversal Vulnerability
| Bugtraq ID: | 2886 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-0783 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 18 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | This vulnerability was announced to BugTraq by Siberian <[email protected]> on June 18, 2001. |
| Vulnerable: |
Cisco TFTP Server 1.1 |
| Not Vulnerable: | |
Discussion
Cisco TFTPD Server Directory Traversal Vulnerability
The Cisco TFTPD server is a freely available software package distributed and maintained by Cisco Systems. The software package is designed to give Microsoft Windows systems the ability to serve files via the Trivial File Transfer Protocol (TFTP).
It is possible to gain access to sensitive files on a system using the affect software. By issuing a dot-dot-slash (../) request to the server, any file on the system may be downloaded.
This makes it possible for attackers to gain access to arbitrary files, and potentially sensitive information.
The Cisco TFTPD server is a freely available software package distributed and maintained by Cisco Systems. The software package is designed to give Microsoft Windows systems the ability to serve files via the Trivial File Transfer Protocol (TFTP).
It is possible to gain access to sensitive files on a system using the affect software. By issuing a dot-dot-slash (../) request to the server, any file on the system may be downloaded.
This makes it possible for attackers to gain access to arbitrary files, and potentially sensitive information.
Exploit / POC
Cisco TFTPD Server Directory Traversal Vulnerability
See discussion.
See discussion.
Solution / Fix
Cisco TFTPD Server Directory Traversal Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.