Quick Tftp Server Pro Directory Traversal Vulnerability

Bugtraq ID:	44712
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 05 2010 12:00AM
Updated:	Nov 05 2010 12:00AM
Credit:	Pr0T3cT10n
Vulnerable:	TallSoft Quick Tftp Server Pro 2.1
Not Vulnerable:

Quick Tftp Server Pro Directory Traversal Vulnerability

Quick Tftp Server Pro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue can allow an attacker to retrieve arbitrary files outside of the FTP server root directory. This may aid in further attacks.

Quick Tftp Server Pro 2.1 is vulnerable; other versions may also be affected.

Quick Tftp Server Pro Directory Traversal Vulnerability

Attackers can exploit this issue using readily available tools.

The following example request is available:

GET ../../../boot.ini C:\boot.txt

Quick Tftp Server Pro Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Quick Tftp Server Pro Directory Traversal Vulnerability

References:

• Quick Tftp Server Pro Homepage (TallSoft)