CVE-2006-1952

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

CVE-2006-1951

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

Directory traversal

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

Directory traversal

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

CVE-2006-1952

The CVE-2006-1952 entry describes a directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier. The issue allows remote attackers to read arbitrary files by using triple dot sequences ("...") in a GET request. Root cause is improper handling of path traversal, enabling...

CVE-2006-1951

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

CVE-2006-1952

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

CVE-2006-1951

The CVE-2006-1951 entry targets SolarWinds TFTP Server versions 8.1 and earlier. A directory traversal flaw allows remote attackers to download arbitrary files by issuing crafted GET requests containing sequences like ....//, which are collapsed into ../ by filtering. This bypass enables access o...

SolarWinds free Windows TFTP server directory traversal

Directory traversal with requests like get NUL/....//....//WINNT/win.ini...

Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows

Rapid7, LLC Security Advisory Rapid7 Advisory R7-0019 Directory traversal vulnerability in SolarWinds TFTP Server for Windows Date: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0019.html CVE: CVE-2006-1951 1. Affected systems: KNOWN VULNERABLE: o SolarWinds TFTP Server v8.1 an...

TFTP File Detection (HP Ignite-UX) - Active Check

The remote host has a TFTP server installed that is serving one or more sensitive HP Ignite-UX files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

TFTP File Detection (Cisco CallManager) - Active Check

The remote host has a TFTP server installed that is serving one or more Cisco CallManager files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Update Protection against Tftpd32 Request Error Message Format String Vulnerability

Tftpd32 is a freeware TFTP server designed for Microsoft Windows operating systems. A vulnerability has been identified in Tftpd32, specifically in the processing of Get requests containing a malformed filename. An attacker capable of sending a specially crafted filename can cause a vulnerable...

tftpd32 TFTP server format string vulnerability

SEND and GET TFTP commands format string bug...

Ms05039 worms in the VC achieve-vulnerability warning-the black bar safety net

Article author: Zhang GE（nickchang） Information source: evil octal information security teamwww.eviloctal.com to This year 8 month, a new worm sniper wave using a ms05039 PnP service vulnerability because ms05039 exploit online is public, please see, you can use this exploit to get the other...

CVE-2003-1264

The CVE-2003-1264 issue affects the TFTP server used by Longshine WAP LCS-883R-AC-B and by the D-Link DI-614+ 2.0 based on it. The vulnerability enables remote attackers to download the configuration file (config.img) and other files without authentication, allowing access to the WEP secret and e...

TFTP Directory Traversal Vulnerabilities - Active Check

The TFTP Trivial File Transfer Protocol allows remote users to read files without having to log in. This may be a big security flaw, especially if tftpd the TFTP server is not well configured by the admin of the remote host. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might b...

TFTP File Detection (Cisco IOS) - Active Check

The remote host has a TFTP server installed that is serving one or more sensitive Cisco IOS files. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

vxTftpSrv TFTP server for Pocket PC buffer overflow

Buffer overflow on oversized file name...

HP Ignite-UX TFTP File Access Information Disclosure

The remote host has a TFTP server installed that is serving one or more HP Ignite-UX files. These files may contain sensitive information. A remote attacker could use this information to mount further attacks. This NASL script was written by Martin O'Neal of Corsaire http://www.corsaire.com The...