Directory Traversal Vulnerability in Acronis Snap Deploy

CVE-2008-1410

Summary

A directory traversal vulnerability exists in the PXE Server (pxesrv.exe) of Acronis Snap Deploy 2.0.0.1076 and earlier, allowing remote attackers to exploit this flaw. By utilizing directory traversal sequences, an attacker can gain unauthorized access to read arbitrary files via the TFTP service. This exposure poses significant risks, as it can lead to the unauthorized disclosure of sensitive information. Users and administrators should restrict access to the TFTP service and upgrade to the latest version to mitigate this vulnerability.

References