Directory traversal vulnerability in TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Services (CMS) 1.31 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
References
Configurations
History
No history.
Information
Published : 2008-03-10 23:44
Updated : 2024-02-04 17:13
NVD link : CVE-2008-1281
Mitre link : CVE-2008-1281
CVE.ORG link : CVE-2008-1281
JSON object : View
Products Affected
argontechnology
- client_management_services
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')