medium5.0
CVE-2006-1952
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) s…
Impact
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winagents | Tftp Server | through 3.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19844
- http://www.rapid7.com/advisories/R7-0020.html
- http://www.securityfocus.com/bid/17718
- http://www.vupen.com/english/advisories/2006/1562
- http://www.winagents.com/en/news/410.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25971
- http://secunia.com/advisories/19844
- http://www.rapid7.com/advisories/R7-0020.html
- http://www.securityfocus.com/bid/17718
- http://www.vupen.com/english/advisories/2006/1562
- http://www.winagents.com/en/news/410.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25971