4 results (0.002 seconds)

CVSS: 7.5EPSS: 7%CPEs: 5EXPL: 3

CVE-2009-3115 – SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service

https://notcve.org/view.php?id=CVE-2009-3115

09 Sep 2009 — SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information. SolarWinds TFTP Server v9.2.0.111 y anteriores permite a atacantes remotos provocar una denegación de servicio (parada del servicio) a través de una petición Option Acknowledgement (OACK) manipulada. NOTA: algunos de estos detalles han sido obtenidos a partir de información ... • https://www.exploit-db.com/exploits/9547 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 2%CPEs: 3EXPL: 0

CVE-2006-1951

https://notcve.org/view.php?id=CVE-2006-1951

24 Apr 2006 — Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering. • http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html •

CVSS: 7.5EPSS: 7%CPEs: 1EXPL: 3

CVE-2002-1542 – SolarWinds TFTP Server Standard Edition 5.0.55 - Large UDP Packet

https://notcve.org/view.php?id=CVE-2002-1542

18 Mar 2003 — SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. SolarWinds TFTP server 5.0.55 y anteriores permite a atacantes remotos causar la Denegación de Servicios (DoS)(caida) mediante un datagrama UDP largo, posiblemete provocando un desbordamiento de búfer. • https://www.exploit-db.com/exploits/21963 •

CVSS: 7.5EPSS: 5%CPEs: 1EXPL: 2

CVE-2002-1209 – SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal

https://notcve.org/view.php?id=CVE-2002-1209

29 Oct 2002 — Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request. Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una petición GET. • https://www.exploit-db.com/exploits/21964 •