Vulnerability in Solarwinds Tftp_server

CVE-2002-1209

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.

EPSS: 0.129 (95.9th percentile) — read the EPSS interpretation.

Affected products

Solarwinds Tftp_server — versions 5.0.55_standard
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)