CyberSec.Space Logo
Back to CVE Browser

CVE-2006-1952

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.1460%
EPSS Percentile35.73th
PublishedApr 24, 2006
Last ModifiedApr 16, 2026

Vulnerability Description

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.

Affected Platforms (CPE)

📦
Winagents

Tftp Server

<= 3.1

References & Advisories

🔗 http://secunia.com/advisories/19844
🔗 http://www.rapid7.com/advisories/R7-0020.html
🔗 http://www.securityfocus.com/bid/17718
🔗 http://www.vupen.com/english/advisories/2006/1562
🔗 http://www.winagents.com/en/news/410.php
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/25971
🔗 http://secunia.com/advisories/19844
🔗 http://www.rapid7.com/advisories/R7-0020.html

Related Vulnerabilities

CVE-2005-181210.0

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbit...

CVE-2006-618410.0

Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to...

CVE-2002-039510.0

The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the ...

CVE-2007-088810.0

Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read arbitrary ...