Unrated severityNVD Advisory· Published Apr 24, 2006· Updated Apr 16, 2026
CVE-2006-1951
CVE-2006-1951
Description
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.
Affected products
3cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:solarwinds:tftp_server:5.0.55_standard:*:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:tftp_server:5.0.60standard:*:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:tftp_server:8.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.rapid7.com/advisories/R7-0019.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/17648nvdPatch
- archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.htmlnvd
- secunia.com/advisories/19848nvd
- securityreason.com/securityalert/778nvd
- www.securityfocus.com/archive/1/431729/100/0/threadednvd
- www.vupen.com/english/advisories/2006/1561nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25969nvd
News mentions
0No linked articles in our index yet.