Published: 12/02/2007 Updated: 16/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Directory traversal vulnerability in the TFTP server in Kiwi CatTools prior to 3.2.0 beta allows remote malicious users to read arbitrary files, and upload files to arbitrary locations, via ..// (dot dot) sequences in the pathname argument to an FTP (1) GET or (2) PUT command.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kiwi enterprises kiwi cattools

Path traversal security vulnerability in Kiwi CatTools TFTP up to 328 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesnt properly verify filename in PUT and GET request which can be used to download/upload any file from/to server Default setting allows replacing of ...

NVD-CWE-Other http://www.kiwisyslog.com/kb/idx/5/178/article/http://www.securityfocus.com/bid/22490 http://www.osvdb.org/33162 http://secunia.com/advisories/24103 http://securityreason.com/securityalert/2236 http://www.vupen.com/english/advisories/2007/0536 https://exchange.xforce.ibmcloud.com/vulnerabilities/32398 http://www.securityfocus.com/archive/1/459933/100/0/threaded http://www.securityfocus.com/archive/1/459500/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/3380/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0888

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect