CVE-1999-0498

Properties

Published:
26.09.1991
Updated:
27.02.2008
Patch available:
Severity:
High
CVSS vector:
(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Vulnerability description

TFTP is not running in a restricted directory, allowing a remote attacker to access sensitive information such as password files.

References:

ISS X-Force: http://xforce.iss.net/static/308.php
CERT: http://www.cert.org/advisories/CA-1991-18.html