Summary
This host is running Distinct TFTP Server and is prone to directory traversal vulnerability.
Impact
Successful exploitation allows an attacker to obtain sensitive information and launch further attacks.
Impact Level: Application
Solution
Upgrade to Distinct TFTP Server version 3.11 or later.
For updates refer to http://www.distinct.com
Insight
The flaw is caused due an input validation error within the TFTP service and can be exploited to download or manipulate files in arbitrary locations outside the TFTP root via specially crafted directory traversal sequences.
Affected
Distinct TFTP Server version 3.01 and prior
References
