EIP-2026-101167

This Python script exploits a directory traversal vulnerability in Avaya IP Office Manager TFTP Server Version 8.1 by sending a crafted TFTP read request with '../' sequences to retrieve arbitrary files (e.g., boot.ini). The exploit demonstrates the vulnerability by reading sensitive files via UDP.