CVE-2001-0783

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...

CVE-1999-1421

CVE-1999-1421 affects NBase switches NH208 and NH215 that run a TFTP server. The vulnerability arises from the TFTP service allowing remote attackers to influence software updates by guessing default target filenames, enabling modification of the switch or triggering a denial-of-service (crash). ...

CVE-1999-1421

NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service crash by guessing the target filenames, which have default names...

Многочисленные дырки в Avaya Argent Office (DoS, weak password, empty SNMP password, tftp file spoofing)

Многочисленные дырки...

CVE-2001-1261

Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file...

IBM TFTP Server for Java vulnerability

Vulnerability: The IBM alphaWorks TFTP Server for Java available at http://alphaworks.ibm.com/tech/TFTP is vulnerable to a standard directory traversal attack i.e. ../../. Vendor Response: The vendor was contacted on 19 June 2001 and responded on 20 June 2001 as follows: "We will take a look at t...

Обратный путь в директориях IBM TFTP Server for Java (directory traversal)

Обратный путь в директориях позволяет обратиться к любому файлу...

CVE-2001-1265

Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. dot dot attack...

Дырка в ADSL-модемах Alcatel (UDP echo tftp spoofing)

Если в локальной сети есть машина поддерживающая UDP echo, то можно через нее получить доступ по TFTP К модему...

CVE-2001-1426

Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations...

Alcatel ADSL modems provide unauthenticated TFTP access via physical WAN interface

Overview The San Diego Supercomputer Center SDSC has recently discovered several vulnerabilities in the Alcatel Speed Touch line of Asymmetric Digital Subscriber Line ADSL modems. These vulnerabilities are the result of weak authentication and access control policies and result in one or more of...

CVE-2000-0015

CVE-2000-0015 affects the CascadeView TFTP server. The vulnerability enables local privilege escalation via a symlink attack, with a CVSSv2 base score of 4.6 (Medium) and a Local attack vector, Low complexity, no authentication, and partial impacts to confidentiality, integrity, and availability....

CVE-2000-0015

CascadeView TFTP server allows local users to gain privileges via a symlink attack...

CVE-1999-0498

CVE-1999-0498 describes a directory-traversal flaw in TFTP servers: remote attackers can read password files because TFTP is not run in a restricted directory. The NVD entry shows a base score of 10.0 (HIGH) with network/vector/impact details, but the connected documents do not specify a concrete...

CVE-1999-0498

TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files...

CVE-1999-0616

CVE-1999-0616 entry is rejected/not used; does not represent an active vulnerability.

CVE-2000-0015

CascadeView TFTP server allows local users to gain privileges via a symlink attack...

CVE-1999-0183

Linux implementations of TFTP would allow access to files outside the restricted directory...

CVE-1999-0183

CVE-1999-0183 affects Linux implementations of TFTP, described as allowing traversal to read files outside the restricted directory. The OpenVAS/Nessus entries confirm a directory-traversal vulnerability enabling arbitrary file reads via TFTP server responses (e.g., tftpd misconfiguration allows ...

CVE-1999-1421

NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the switch or cause a denial of service crash by guessing the target filenames, which have default names...