Secunia

Luigi Auriemma has reported some vulnerabilities in Acronis Snap Deploy, which can be exploited by malicious people to disclose sensitive information or cause a DoS (Denial of Service).

1) A NULL-pointer dereference error within the PXE Server (pxesrv.exe) can be exploited to crash the service via a specially crafted TFTP request.

2) An input validation error within the PXE Server can be exploited to download arbitrary files outside the TFTP root via directory traversal attacks.

The vulnerabilities are reported in version 2.0.0.1076. Other versions may also be affected.

Solution
Restrict network access to the service.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/acropxe-adv.txt

Deep Links
Links available in Customer Area