ID de Prueba:	1.3.6.1.4.1.25623.1.0.200001
Categoría:	Remote file access
Título:	Kiwi CatTools < 3.2.9 Directory Traversal
Resumen:	The remote tftpd server is affected by a directory traversal vulnerability.
Descripción:	Summary: The remote tftpd server is affected by a directory traversal vulnerability. Vulnerability Insight: Kiwi CatTools is installed on the remote host. The version installed is vulnerable to a directory traversal attack by using '[char]//..' sequences in the path. Vulnerability Impact: A attacker may be able to read and write files outside the tftp root. Solution: Upgrade to Kiwi CatTools version 3.2.9 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	BugTraq ID: 22490 Common Vulnerability Exposure (CVE) ID: CVE-2007-0888 http://www.securityfocus.com/bid/22490 Bugtraq: 20070208 TFTP directory traversal in Kiwi CatTools (Google Search) http://www.securityfocus.com/archive/1/459500/100/0/threaded Bugtraq: 20070213 Re: TFTP directory traversal in Kiwi CatTools (Google Search) http://www.securityfocus.com/archive/1/459933/100/0/threaded http://www.osvdb.org/33162 http://secunia.com/advisories/24103 http://securityreason.com/securityalert/2236 http://www.vupen.com/english/advisories/2007/0536 XForce ISS Database: kiwicattools-tftp-directory-traversal(32398) https://exchange.xforce.ibmcloud.com/vulnerabilities/32398
Copyright	Copyright (C) 2008 Ferdy Riphagen

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.