CVE-2011-4722
Ipswitch TFTP Server 1.0.0.24 - Path Traversal via RRQ Filename Field
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-4722.
PoCs published by SecPod Research, Prabhu S Angadi, sinn3r, juan vazquez, including Metasploit module auxiliary/scanner/tftp/ipswitch_whatsupgold_tftp.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Ipswitch TFTP Server 1.0.0.24, allowing an attacker to read arbitrary files by sending a crafted TFTP Read Request with '../' sequences. The PoC sends a UDP packet to retrieve the 'boot.ini' file from the target system.
Description
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in Ipswitch TFTP Server 1.0.0.24, allowing an attacker to read arbitrary files by sending a crafted TFTP Read Request with '../' sequences. The PoC sends a UDP packet to retrieve the 'boot.ini' file from the target system.
This Metasploit module exploits a directory traversal vulnerability in IpSwitch WhatsUp Gold's TFTP service (CVE-2011-4722) to read arbitrary files from the target system. It sends a crafted TFTP request with traversal sequences to retrieve files like 'windows\win.ini' and saves the output to disk.