CVE-2005-1813

Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.
Configurations

Configuration 1 (hide)

cpe:2.3:a:futuresoft:tftp_server_2000:1.0.0.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:58

Type Values Removed Values Added
References () http://secunia.com/advisories/15539 - () http://secunia.com/advisories/15539 -
References () http://securitytracker.com/id?1014079 - Exploit () http://securitytracker.com/id?1014079 - Exploit
References () http://www.security.org.sg/vuln/tftp2000-1001.html - Exploit () http://www.security.org.sg/vuln/tftp2000-1001.html - Exploit
References () http://www.securityfocus.com/bid/13821 - Exploit () http://www.securityfocus.com/bid/13821 - Exploit

Information

Published : 2005-06-01 04:00

Updated : 2024-11-20 23:58


NVD link : CVE-2005-1813

Mitre link : CVE-2005-1813

CVE.ORG link : CVE-2005-1813


JSON object : View

Products Affected

futuresoft

  • tftp_server_2000
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')