CVE-2006-1951: SolarWinds Tftp Server

Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.

Affected products

• SolarWinds Tftp Server: version 5.0.55_standard only; version 5.0.60standard only; version 8.1 only

Published 2006-04-24. Last modified 2026-06-16.