CVE-2002-2353: TFTPD32

Medium severity, CVSS 6.4. EPSS: 7% chance of exploitation in the next 30 days.

tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.

Affected products

• TFTPD32 TFTPD32: version 2.50 only; version 2.50.2 only

Published 2002-12-31. Last modified 2026-06-16.