CVE-2005-1813 Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2...
HighCVSS 7.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) ".." (dot dot backslash) sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| futuresoft tftp server 2000 | = 1.0.0.1 | No fix listed |
References
- 15539 third-party-advisory
- 1014079 exploit vdb-entry
- www.security.org.sg exploit
- 13821 exploit vdb-entry