CVE-2008-1620 Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a...
HighCVSS 7.5
EPSS 3.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 2x thinclientserver | <= 3.2.0.0 | No fix listed |
| 2x thinclientserver | <= 5.0 | No fix listed |
References
- aluigi.altervista.org exploit
- aluigi.org exploit patch
- 29590 third-party-advisory vendor-advisory
- 20080331 Directory traversal in 2X ThinClientServer v5.0_sp1-r3497 mailing-list
- 28504 vdb-entry
- ADV-2008-1040 vdb-entry
- 2xthinclient-tftpd-directory-traversal(41528) vdb-entry