Lucene search
+L

CVE-2002-2353

🗓️ 29 Oct 2007 19:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

tftpd32 2.50/2.50.2 allows remote file read/write via full pathname in GET/PUT requests

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2002-2353
29 Oct 200719:00
cvelist
exploitdb
Exploit DB
TFTPD32 2.50 - Arbitrary File Download/Upload
18 Nov 200200:00
exploitdb
euvd
EUVD
EUVD-2002-2331
7 Oct 202500:30
euvd
nvd
NVD
CVE-2002-2353
31 Dec 200205:00
nvd
openvas
OpenVAS
TFTP Directory Traversal Vulnerabilities - Active Check
3 Nov 200500:00
openvas
nessus
Tenable Nessus
TFTP Traversal Arbitrary File Access
16 May 200500:00
nessus
cert
CERT
Wyse Simple Imager (WSI) includes vulnerable versions of TFTPD32
19 Nov 200900:00
cert
NVD
Node
OR
tftpd32tftpd32Match2.50.2
ParameterPositionPathDescriptionCWE
/boot.inipath/boot.iniTFTP GET exposes reading arbitrary files via full pathnames.CWE-264
/boot.inipath/boot.iniTFTP PUT exposes writing arbitrary files via full pathnames.CWE-264

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:01Current
6.7Medium risk
Vulners AI Score6.7
CVSS 26.4
EPSS0.07015
52