CVE-2009-0288: Windows Tftp Utility Tftputil

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request.

Affected products

• Windows Tftp Utility Tftputil: version 1.2.0 only; version 1.3.0 only

Published 2009-01-27. Last modified 2026-06-16.