Medium severity5.3NVD Advisory· Published Mar 20, 2017· Updated May 13, 2026
CVE-2017-6805
CVE-2017-6805
Description
Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET command.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- hyp3rlinx.altervista.org/advisories/MOBAXTERM-TFTP-PATH-TRAVERSAL-REMOTE-FILE-ACCESS.txtnvdExploitThird Party Advisory
- packetstormsecurity.com/files/141582/MobaXterm-Personal-Edition-9.4-Path-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2017/Mar/34nvdExploitMailing ListThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/41592/nvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/96886nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.