CVE-2005-1813

Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2005-06-01

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Tftp Server 2000 (Futuresoft)

References

• http://secunia.com/advisories/15539
• http://securitytracker.com/id?1014079
• http://www.security.org.sg/vuln/tftp2000-1001.html
• http://www.securityfocus.com/bid/13821