CVE-2002-1209

Опубликовано: 04 нояб. 2002

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via ".." (dot-dot backslash) sequences in a GET request.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html
http://www.idefense.com/advisory/10.24.02.txt
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6045
https://exchange.xforce.ibmcloud.com/vulnerabilities/10469
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html
http://www.idefense.com/advisory/10.24.02.txt
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6045
https://exchange.xforce.ibmcloud.com/vulnerabilities/10469

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04518

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-crgv-7g64-wqpw

github

больше 3 лет назад

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.