CVE-2012-6664

Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read or write arbitrary files via a .. (dot dot) in the (1) get or (2) put commands.

Affected products

Distinct Intranet Servers, Tftp Server

CVSS 3.1

9.1 CRITICAL

EPSS

29.5% (98th percentile)

Weakness

CWE-22

NVD status

Deferred

Published

2024-06-21