Vulnerability in Tftpd32

CVE-2002-2353

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.

EPSS: 0.070 (93.5th percentile) — read the EPSS interpretation.

Affected products

  • Tftpd32 — versions 2.50, 2.50.2
  • N/a — versions n/a

Weakness classification (CWE)

References