CVE-2005-1813

FutureSoft TFTP Server Evaluation Version 1.0.0.1 - Path Traversal via TFTP GET Request

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15539
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13821
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1014079

Scores

EPSS 0.0214
EPSS Percentile 79.8%

Details

CWE
CWE-22
Status published
Products (1)
futuresoft/tftp_server_2000 1.0.0.1
Published Jun 01, 2005
Tracked Since Feb 18, 2026