vendor:
ThinClientServer
by:
SecurityFocus
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: ThinClientServer
Affected Version From: 2X ThinClientServer 5.0 sp1-r3497
Affected Version To: Other versions may also be affected.
Patch Exists: YES
Related CWE: N/A
CPE: a:2x:thinclientserver
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2008
2X ThinClientServer Directory Traversal Vulnerability
2X ThinClientServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside of the TFTP application's root directory. This can expose sensitive information that could help the attacker launch further attacks.
Mitigation:
Ensure that user-supplied input is properly sanitized.
