CVEvulnerability
CVE-2009-1730
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.
Affected configurations
• netmechanica netdecision tftp server 4.2
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/35131 Vendor Advisory
- http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1 URL Repurposed
- http://www.securityfocus.com/bid/35002 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50574 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/35131 Vendor Advisory
- http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1 URL Repurposed
- http://www.securityfocus.com/bid/35002 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50574 exchange.xforce.ibmcloud.com