VulnerabilityModified
CVE-2006-1952
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.
MEDIUM 5.0EPSS 5.11%
Does this matter?
Lower severity and a low EPSS score (5.11%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 5.11% probability · 92th percentile
- CISA KEV
- Not listed
- Affected
- winagents/tftp server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/19844
- http://www.rapid7.com/advisories/R7-0020.htmlVendor Advisory
- http://www.securityfocus.com/bid/17718
- http://www.vupen.com/english/advisories/2006/1562
- http://www.winagents.com/en/news/410.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25971
- http://secunia.com/advisories/19844
- http://www.rapid7.com/advisories/R7-0020.htmlVendor Advisory
- http://www.securityfocus.com/bid/17718
- http://www.vupen.com/english/advisories/2006/1562
- http://www.winagents.com/en/news/410.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25971
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.