CVE

CVE-2002-1209

Date: (C)2002-11-04   (M)2023-12-22

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." (dot-dot backslash) sequences in a GET request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html

BID-6045

http://www.idefense.com/advisory/10.24.02.txt

tftp-dot-directory-traversal(10469)