CVE-2017-6805: Path Traversal
Published Mar 20, 2017
·Updated
Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a GET command.
Affected Software
1 affected component
Mobatek MobaXterm=9.4
Event History
Mar 20, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6805?
CVE-2017-6805 has been classified as a high severity vulnerability due to its potential for remote file access.
2
How do I fix CVE-2017-6805?
To fix CVE-2017-6805, upgrade MobaXterm Personal Edition to a version newer than 9.4 that addresses this vulnerability.
3
What types of attacks can exploit CVE-2017-6805?
CVE-2017-6805 can be exploited by attackers using directory traversal techniques to read arbitrary files on the server.
4
Which software is affected by CVE-2017-6805?
CVE-2017-6805 affects MobaXterm Personal Edition version 9.4.
5
What is the impact of CVE-2017-6805 on users?
The impact of CVE-2017-6805 allows unauthorized remote attackers to read sensitive files, potentially compromising user data.