{"id":"CVE-2009-1730","aliases":["EUVD-2009-1725","GHSA-834m-cfcj-8vp4"],"status":"published","title":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow...","description":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.5451,"percentile":0.99023,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2009-05-20T18:00:00Z","modified":"2026-06-16T23:07:56Z","exploits":[{"source":"exploitdb","id":"EDB-20392","title":"NetDecision 4.2 - TFTP Writable Directory Traversal Execution (Metasploit)","type":"remote","platform":"windows","date":"2012-08-10","verified":true,"url":"https://www.exploit-db.com/exploits/20392"},{"source":"metasploit","id":"auxiliary/scanner/tftp/netdecision_tftp","title":"NetDecision 4.2 TFTP Directory Traversal","type":"auxiliary","date":"2009-05-16","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/tftp/netdecision_tftp"},{"source":"metasploit","id":"exploit/windows/tftp/netdecision_tftp_traversal","title":"NetDecision 4.2 TFTP Writable Directory Traversal Execution","type":"exploit","platform":"Windows","date":"2009-05-16","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/tftp/netdecision_tftp_traversal"}],"products":[{"vendor":"netmechanica","product":"netdecision_tftp_server"}],"references":[{"url":"http://www.princeofnigeria.org/blogs/index.php/2009/05/17/netdecision-tftp-server-4-2-tftp-directo?blog=1","tags":["x_refsource_MISC","x_transferred","URL Repurposed"]},{"url":"http://secunia.com/advisories/35131","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50574","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/35002","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1730"},{"url":"https://github.com/advisories/GHSA-834m-cfcj-8vp4"}],"sources":{"cve":[{"id":"CVE-2009-1730","description":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.","status":"published","published":"2009-05-20T18:00:00Z","modified":"2024-08-07T05:20:35.188Z","updated_at":"2026-11-02T14:33:25.516454Z"}],"euvd":[{"id":"EUVD-2009-1725","description":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.","status":"published","published":"2009-05-20T18:00:00Z","modified":"2024-08-07T05:20:35Z","updated_at":"2026-11-03T01:39:20.465485Z"}],"ghsa":[{"id":"GHSA-834m-cfcj-8vp4","title":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow...","description":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.","status":"published","published":"2022-05-02T03:27:54Z","modified":"2023-01-31T05:08:28Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:49:24.252889Z"}],"nvd":[{"id":"CVE-2009-1730","description":"Multiple directory traversal vulnerabilities in NetMechanica NetDecision TFTP Server 4.2 allow remote attackers to read or modify arbitrary files via directory traversal sequences in the (1) GET or (2) PUT command.","status":"published","published":"2009-05-20T18:30:00.377Z","modified":"2026-06-16T23:07:56.51Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:01:35.136779Z"}]}}