CVE-2002-1209

SolarWinds TFTP Server Standard Edition 5.0.55 - Directory Traversal

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.

Vulnerabilidad de atravesamiento de directorios en SolarWinds TFTP Server 5.0.55 y posiblemente anteriores, permite a atacantes remotos leer ficheros arbitrarios mediante secuencias "..\\" (punto punto barra invertida) en una petición GET.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2002-10-14 CVE Reserved
2002-10-25 First Exploit
2002-10-29 CVE Published
2024-08-08 CVE Updated
2024-09-28 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (5)

URL	Tag	Source
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html	Mailing List
http://www.securityfocus.com/bid/6045	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/10469	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/21964	2002-10-25
http://www.idefense.com/advisory/10.24.02.txt	2024-08-08

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Solarwinds Search vendor "Solarwinds"		Tftp Server Search vendor "Solarwinds" for product "Tftp Server"				5.0.55_standard Search vendor "Solarwinds" for product "Tftp Server" and version "5.0.55_standard"		-		Affected