2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal Vulnerability

2008-03-29T00:00:00
ID EDB-ID:31562
Type exploitdb
Reporter Luigi Auriemma
Modified 2008-03-29T00:00:00

Description

2X ThinClientServer 5.0 sp1-r3497 TFTP service Directory Traversal Vulnerability. CVE-2008-1620 . Remote exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/28504/info

2X ThinClientServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue allows an attacker to access arbitrary files outside of the TFTP application's root directory. This can expose sensitive information that could help the attacker launch further attacks.

2X ThinClientServer 5.0 sp1-r3497 with TFTPd.exe 3.2.0.0 is vulnerable; other versions may also be affected.

tftpx SERVER .../.../.../.../.../.../boot.ini none
tftpx SERVER ...\...\...\...\...\...\windows\win.ini none