Unrated severityNVD Advisory· Published Apr 24, 2006· Updated Jun 16, 2026
CVE-2006-1951
CVE-2006-1951
Description
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:tftp_server:5.0.60standard:*:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:tftp_server:8.1:*:*:*:*:*:*:*
- (no CPE)range: <=8.1
Patches
Vulnerability mechanics
References
8- www.rapid7.com/advisories/R7-0019.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/17648nvdPatch
- archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.htmlnvd
- secunia.com/advisories/19848nvd
- securityreason.com/securityalert/778nvd
- www.securityfocus.com/archive/1/431729/100/0/threadednvd
- www.vupen.com/english/advisories/2006/1561nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25969nvd
News mentions
0No linked articles in our index yet.