CVE-2009-1730

Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

54.51% chance of exploitation in the next 30 days, 99th percentile

Published

2009-05-20

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/tftp/netdecision_tftp.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20392

References

• CVE Record
• NVD entry

Related

• CVE-2009-1729
• CVE-2009-1731
• CVE-2009-1724
• CVE-2009-1734
• CVE-2009-1699
• CVE-2009-1735