PatchTheCVEtftp server tftpdwin vulnerabilities and fixes
Recent CVEs affecting tftp server tftpdwin, with upgrade or downgrade steps. 3 tracked.
Also searched as: tftpservertftpdwin.
tftp server tftpdwin has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-05-13. Highest priority: CVE-2007-2639 (score 62/100).
- CVE-2007-2639 HIGH 10.0 DOWNGRADE Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files
- CVE-2007-1404 HIGH 7.3 DOWNGRADE tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a
- CVE-2006-4948 HIGH 7.5 UPGRADE Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote at
FAQ
How do I fix tftp server tftpdwin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tftp server tftpdwin being exploited right now?
None of the tracked tftp server tftpdwin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tftp server tftpdwin CVE should I patch first?
CVE-2007-2639 currently ranks highest (62/100): Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files .