2 results (0.010 seconds)

CVSS: 10.0EPSS: 55%CPEs: 1EXPL: 4

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet. • https://www.exploit-db.com/exploits/1027 https://www.exploit-db.com/exploits/16344 http://secunia.com/advisories/15539 http://securitytracker.com/id?1014079 http://www.security.org.sg/vuln/tftp2000-1001.html http://www.securityfocus.com/bid/13821 - • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 3

Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences. • http://secunia.com/advisories/15539 http://securitytracker.com/id?1014079 http://www.security.org.sg/vuln/tftp2000-1001.html http://www.securityfocus.com/bid/13821 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •