CVE-2009-0271

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/51487
http://secunia.com/advisories/33594Vendor Advisory
http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/33344Patch
http://www.vupen.com/english/advisories/2009/0176
http://osvdb.org/51487
http://secunia.com/advisories/33594Vendor Advisory
http://www.fujitsu.com/global/services/computing/server/primequest/products/os/windows-server-2008-2.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/33344Patch
http://www.vupen.com/english/advisories/2009/0176

Timeline

Published: Jan 26, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-02726.8Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote CVE-2009-02734.3Multiple cross-site scripting (XSS) vulnerabilities in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allow remo CVE-2009-02745.0Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to ob CVE-2009-02756.5Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP CVE-2009-02765.0Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin CVE-2009-02777.8Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v platforms allows local CVE-2009-02785.0Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-I CVE-2009-02797.5SQL injection vulnerability in comentar.php in Pardal CMS 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via th CVE-2009-02807.5Asp Project Management 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the crypt cookie to 1.CVE-2009-02817.5SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the (1) use CVE-2009-02829.3Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500 CVE-2009-02834.3Cross-site scripting (XSS) vulnerability in err.asp in Oblog allows remote attackers to inject arbitrary web script or HTML via the message