source: wwwsecurityfocuscom/bid/910/info
The tftpd bundled with CascadeView for Ascend's B-STDX 8000/9000 network devices creates a log in /tmp called tftpd_xfer_statuslog If /tmp/tftpd_xfer_statuslog already exists as a symbolic link, tftpd will follow it and overwrite any data it points to (it runs as root) It is possible for an att ...