CVE-2002-1209

CVE-2002-1209 – SolarWinds TFTP Server is affected (v5.0.55 and possibly earlier). A directory traversal flaw allows remote attackers to read arbitrary files via dot-dot backslash sequences in a GET request. The vulnerability targets the TFTP service’s file path handling and can expose confidenti...

CVE-2009-3115

CVE-2009-3115 affects SolarWinds TFTP Server versions up to 9.2.0.111 and earlier. The vulnerability is a denial of service caused by crafting an Option Acknowledgement (OACK) request, potentially stopping the service and impacting availability. Public exploit coverage is noted in some sources, a...

CVE-2002-1542

The CVE refers to SolarWinds TFTP server 5.0.55 and earlier. Affected component: the TFTP server handling of UDP datagrams. Root cause: processing a large UDP datagram can cause a crash, with OpenVAS/NASL and Nessus entries describing the overflow risk. Documented impact: denial of service via se...

CVE-2010-2115

CVE-2010-2115 refers to a Denial of Service in SolarWinds TFTP Server 10.4.0.10, triggered by a crafted Read Request over UDP that causes the server to stop accepting new connections (remote attacker). The public details across sources confirm the affected product, the vulnerable input (Read Requ...

CVE-2010-2310

CVE-2010-2310 affects SolarWinds TFTP Server 10.4.0.13, allowing remote denial of service (crash) via an overly long Write request. Multiple sources confirm the DoS issue and cite 10.4.0.14 as the fixed version. Practical impact is DoS on the TFTP service, reducing availability. Remediation obser...

CVE-2006-1951

The CVE-2006-1951 entry targets SolarWinds TFTP Server versions 8.1 and earlier. A directory traversal flaw allows remote attackers to download arbitrary files by issuing crafted GET requests containing sequences like ....//, which are collapsed into ../ by filtering. This bypass enables access o...