Directory traversal

2008-03-2010:44:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%

JSON

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service.

CPENameOperatorVersion
snap_deployeq2.0.0.1076

CPE	Name	Operator	Version
	snap_deploy	eq	2.0.0.1076

References

aluigi.altervista.org/adv/acropxe-adv.txt

secunia.com/advisories/29305

securityreason.com/securityalert/3758

www.securityfocus.com/archive/1/489358/100/0/threaded

www.securityfocus.com/bid/28182

www.vupen.com/english/advisories/2008/0814/references

exchange.xforce.ibmcloud.com/vulnerabilities/41074

www.exploit-db.com/exploits/5228