TFTP.GET.Shadow

Description

It indicates an attempt to access the shadow file on a host running Trivial File Transfer Protocol (TFTP) service.

There is a long-known security hole in TFTP that allows any unauthenticated user to read any readable files and to write any writable files on a remote system. Attackers can take advantage of this to get sensitive system information.

Affected Products

Any unprotected SunOS 3.x is vulnerable.

Impact

Information leak may assist future attacks

Recommended Actions

Apply appropriate patches or Upgrade the system to the latest non-vulnerable version.