EIP-2026-118431

The exploit demonstrates a directory traversal vulnerability in Distinct TFTP Server <= 3.01, allowing arbitrary file read/write via '../' sequences in GET/PUT requests. The PoC includes functional commands to retrieve 'boot.ini' and upload 'nc.exe' to the target system.