Secunia

Two vulnerabilities have been reported in the PacketTrap pt360, which can be exploited by malicious people to cause a DoS (Denial of Service), disclose sensitive information, or to compromise a vulnerable system.

1) An unspecified error within the processing of TFTP packets can be exploited to crash the TFTP server.

2) An input validation error within the handling of pathnames in the TFTP server can be exploited to e.g. read or write arbitrary files on the vulnerable system via directory traversal attacks.

The vulnerabilities are reported in versions prior to 2.0.3900.0.

Solution
Update to version 2.0.3900.0 or later.
Further details available in Customer Area

Provided and/or discovered by
princeofnigeria and r@b13$, Digital Defense Inc. Vulnerability Research Team

Changelog
Further details available in Customer Area

Original Advisory
PacketTrap:
http://www.emediawire.com/releases/2008/2/prweb731563.htm

Digital Defense Inc.:
http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt
http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt

Deep Links
Links available in Customer Area