Walusoft TFTPServer2000 TFTP Server Directory Traversal Vulnerability
BID:33117
Info
Walusoft TFTPServer2000 TFTP Server Directory Traversal Vulnerability
| Bugtraq ID: | 33117 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2009 12:00AM |
| Updated: | Jan 06 2009 05:32PM |
| Credit: | Rob Kraus, princeofnigeria (PoN) |
| Vulnerable: |
Walusoft Walusoft TFTPServer2000 3.6.1 |
| Not Vulnerable: | |
Discussion
Walusoft TFTPServer2000 TFTP Server Directory Traversal Vulnerability
Walusoft TFTPServer2000 TFTP server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to access arbitrary files outside of the TFTP server root directory. This can expose sensitive information that could help the attacker launch further attacks.
Walusoft TFTPServer2000 3.6.1 is vulnerable; other versions may also be affected.
Walusoft TFTPServer2000 TFTP server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
Exploiting this issue can allow an attacker to access arbitrary files outside of the TFTP server root directory. This can expose sensitive information that could help the attacker launch further attacks.
Walusoft TFTPServer2000 3.6.1 is vulnerable; other versions may also be affected.
Exploit / POC
Walusoft TFTPServer2000 TFTP Server Directory Traversal Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Walusoft TFTPServer2000 TFTP Server Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Walusoft TFTPServer2000 TFTP Server Directory Traversal Vulnerability
References:
References: