MobaXterm Personal Edition v9.4 TFTP Directory Traversal File Disclosure

Name: MobaXterm Personal Edition v9.4 TFTP Directory Traversal File Disclosure
Uploaded: 2017-03-08T20:06:28+00:00
Duration: 2 min 15 s
Channel: hyp3rlinx
Description: Remote attackers can use UDP socket connection to TFTP server port 69 and send Read request, to retrieve otherwise protected files using directory traversal attacks e.g. ../../../../Windows/system.ini

Remote attackers can use UDP socket connection to TFTP server port 69 and send Read request, to retrieve otherwise protected files using directory traversal attacks  e.g.    ../../../../Windows/system.ini