CVE-2002-1209 Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." (dot-dot backslash) sequences in a GET request.
MediumCVSS 5.0
EPSS 12.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." (dot-dot backslash) sequences in a GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds tftp server | = 5.0.55_standard | No fix listed |
References
- 20021024 iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server mailing-list
- www.idefense.com exploit patch vendor-advisory
- 6045 vdb-entry
- tftp-dot-directory-traversal(10469) vdb-entry