Code: p621 Severity: Warning
Description: This event is generated when a TFTP request is made with a directory designation of "/". This may be an indication of an attempt to request or place files on the TFTP server outside the root directory configured for the TFTP server. Impact: TFTP servers that allow files to be placed outside the configured root directory for the server may allow remote attackers to execute arbitrary commands on the system. Additionally if the TFTP server allows directory transversal using the "/" designator it may be possible to retrieve files from other directories on the system. Corrective: Upgrade to the current version of your TFTP server solution, or contact the product vendor for patch information.
|
