CVE-2009-0288 Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a....
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| windows tftp utility tftputil | = 1.2.0 | No fix listed |
| windows tftp utility tftputil | = 1.3.0 | No fix listed |
References
- 33561 third-party-advisory vendor-advisory
- sourceforge.net patch
- www.princeofnigeria.org url-repurposed
- 20090115 TFTPUtil GUI TFTP Directory Traversal mailing-list
- 33287 patch vdb-entry
- tftputil-tftpget-directory-traversal(48019) vdb-entry