CVE-2006-1951
https://notcve.org/view.php?id=CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering. • http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html http://secunia.com/advisories/19848 http://securityreason.com/securityalert/778 http://www.rapid7.com/advisories/R7-0019.html http://www.securityfocus.com/archive/1/431729/100/0/threaded http://www.securityfocus.com/bid/17648 http://www.vupen.com/english/advisories/2006/1561 https://exchange.xforce.ibmcloud.com/vulnerabilities/25969 •
CVE-2004-2432
https://notcve.org/view.php?id=CVE-2004-2432
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow. • http://secunia.com/advisories/11840 http://securitytracker.com/id?1010464 http://www.osvdb.org/6848 http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt http://www.securityfocus.com/bid/10526 https://exchange.xforce.ibmcloud.com/vulnerabilities/16390 •
CVE-2002-1542 – SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet
https://notcve.org/view.php?id=CVE-2002-1542
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. SolarWinds TFTP server 5.0.55 y anteriores permite a atacantes remotos causar la Denegación de Servicios (DoS)(caida) mediante un datagrama UDP largo, posiblemete provocando un desbordamiento de búfer. • https://www.exploit-db.com/exploits/21963 http://archives.neohapsis.com/archives/bugtraq/2002-10/0344.html http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0040.html http://www.iss.net/security_center/static/10462.php http://www.securityfocus.com/bid/6043 •
CVE-2002-2237
https://notcve.org/view.php?id=CVE-2002-2237
tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux. • http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html http://www.kb.cert.org/vuls/id/632633 https://exchange.xforce.ibmcloud.com/vulnerabilities/10817 • CWE-20: Improper Input Validation •
CVE-2002-1209 – SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal
https://notcve.org/view.php?id=CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request. Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una petición GET. • https://www.exploit-db.com/exploits/21964 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html http://www.idefense.com/advisory/10.24.02.txt http://www.securityfocus.com/bid/6045 https://exchange.xforce.ibmcloud.com/vulnerabilities/10469 •