Unscored severity · published Nov 4, 2002
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences…
–
CVSS
12.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tftp Server · Solarwinds
5.0.55_standard · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1209
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1209
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html
Exploit
http://www.idefense.com/advisory/10.24.02.txt
www.securityfocus.com
http://www.securityfocus.com/bid/6045
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/10469
More from Tftp Server
–
CVE-2010-2310
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request
–
CVE-2010-2115
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request
–
CVE-2009-3115
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request
–
CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//"…
–
CVE-2002-1542
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow