The remote tftpd server is affected by a directory traversal vulnerability. Description : Kiwi CatTools is installed on the remote host. The version installed is vulnerable to a directory traversal attack by using '[char]//..' sequences in the path. A attacker may be able to read and write files outside the tftp root.

Upgrade to Kiwi CatTools version 3.2.9 or later.

• http://marc.theaimsgroup.com/?l=bugtraq&m=117097429127488&w=2
• http://www.kiwisyslog.com/kb/idx/5/178/article/

---

Updated on 2015-03-25