CVE-2009-1730
NetMechanica NetDecision TFTP Server 4.2 - Path Traversal and Arbitrary File Write via GET or PUT Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-1730.
PoCs published by Metasploit, Rob Kraus, juan vazquez, including Metasploit module auxiliary/scanner/tftp/netdecision_tftp.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in NetDecision 4.2 TFTP server to upload arbitrary files, achieving remote code execution via a malicious MOF file and executable.
Description
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
Exploits (3)
This Metasploit module exploits a directory traversal vulnerability in NetDecision 4.2 TFTP server to upload arbitrary files, achieving remote code execution via a malicious MOF file and executable.
This Metasploit module exploits a directory traversal vulnerability in NetDecision 4.2 TFTP service to read arbitrary files from the target system. It sends a crafted TFTP request with traversal sequences to retrieve files like 'windows\win.ini'.
This Metasploit module exploits a directory traversal vulnerability in NetDecision 4.2 TFTP server, allowing arbitrary file uploads to the filesystem, leading to remote code execution. It uploads a malicious executable and a MOF file to trigger execution via WMI.