
CVE-2010-2310 – SolarWinds TFTP Server 10.4.0.13 - Denial of Service
https://notcve.org/view.php?id=CVE-2010-2310
16 Jun 2010 — SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. SolarWinds TFTP Server v10.4.0.13, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición de escritura larga. • https://www.exploit-db.com/exploits/13836 • CWE-20: Improper Input Validation •

CVE-2010-2115 – SolarWinds TFTP Server 10.4.0.10 - Denial of Service
https://notcve.org/view.php?id=CVE-2010-2115
28 May 2010 — SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. Servidor SolarWinds TFTP v10.4.0.10 permite a atacantes remotos provocar una denegación de servicio (impide conexiones nuevas) a través de una petición de lectura manipulada. The SolarWinds TFTP server can be shut down by sending a netascii read request with a specially crafted file name. • https://packetstorm.news/files/id/180555 • CWE-20: Improper Input Validation •

CVE-2009-3115 – SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service
https://notcve.org/view.php?id=CVE-2009-3115
09 Sep 2009 — SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information. SolarWinds TFTP Server v9.2.0.111 y anteriores permite a atacantes remotos provocar una denegación de servicio (parada del servicio) a través de una petición Option Acknowledgement (OACK) manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de información ... • https://www.exploit-db.com/exploits/9547 • CWE-20: Improper Input Validation •

CVE-2006-1951
https://notcve.org/view.php?id=CVE-2006-1951
24 Apr 2006 — Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering. • http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html •

CVE-2002-1542 – SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet
https://notcve.org/view.php?id=CVE-2002-1542
18 Mar 2003 — SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. SolarWinds TFTP server 5.0.55 y anteriores permite a atacantes remotos causar la Denegación de Servicios (DoS)(caida) mediante un datagrama UDP largo, posiblemete provocando un desbordamiento de búfer. • https://www.exploit-db.com/exploits/21963 •

CVE-2002-1209 – SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal
https://notcve.org/view.php?id=CVE-2002-1209
29 Oct 2002 — Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request. Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una petición GET. • https://www.exploit-db.com/exploits/21964 •