CVE-2011-4722

This exploit demonstrates a directory traversal vulnerability in Ipswitch TFTP Server 1.0.0.24, allowing an attacker to read arbitrary files by sending a crafted TFTP Read Request with '../' sequences. The PoC sends a UDP packet to retrieve the 'boot.ini' file from the target system.

This Metasploit module exploits a directory traversal vulnerability in IpSwitch WhatsUp Gold's TFTP service (CVE-2011-4722) to read arbitrary files from the target system. It sends a crafted TFTP request with traversal sequences to retrieve files like 'windows\win.ini' and saves the output to disk.