hyp3rlinx.altervista.org
http://hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txt CVE-2017-6805
MEDIUM
MobaXterm Personal Edition 9.4 - Directory Traversal
Record summary
CVE-2017-6805 has a selected CVSS score of 5.3 (medium); EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET command.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMobaXterm Personal Edition 9.4 - Directory TraversalExploitDB exploitby hyp3rlinxNot analyzed1 file
References
6packetstormsecurity.com
http://packetstormsecurity.com/files/141582/MobaXterm-Personal-Edition-9.4-Path-Traversal.html 20170314 CVE-2017-6805 MobaXterm Personal Edition v9.4 Directory Traversal File Disclosuremailing list
http://seclists.org/fulldisclosure/2017/Mar/34 96886vdb entry
http://www.securityfocus.com/bid/96886 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-6805 41592exploit
https://www.exploit-db.com/exploits/41592