CVE-2007-0888

no score yetEPSS 5.1%

Directory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows remote attackers to read arbitrary files, and upload files to arbitrary locations, via ..// (dot dot) sequences in the pathname argument to an FTP (1) GET or (2) PUT command.

EPSS: 5.1% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2007-02-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kiwi_enterprises:kiwi_cattools

References

http://secunia.com/advisories/24103
http://securityreason.com/securityalert/2236
http://www.kiwisyslog.com/kb/idx/5/178/article/
http://www.osvdb.org/33162
http://www.securityfocus.com/archive/1/459500/100/0/threaded

Check your stack JSON