Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-6664.
PoCs published by Metasploit, modpr0be, sinn3r, including Metasploit module exploits/windows/tftp/distinct_tftp_traversal.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Distinct TFTP 3.10 to upload arbitrary files, achieving remote code execution as SYSTEM via WbemExec.
Description
Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. (dot dot) in the (1) get or (2) put commands.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in Distinct TFTP 3.10 to upload arbitrary files, achieving remote code execution as SYSTEM via WbemExec.
This Metasploit module exploits a directory traversal vulnerability in Distinct TFTP Server 3.10, allowing arbitrary file writes to the server's filesystem, leading to remote code execution as SYSTEM. It uploads a malicious EXE and MOF file to achieve execution via WMI.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N