TFTPdWin version 0.4.2 contains a vulnerability that allows a potential intruder to gain read and write access to directories and files outside of the TFTP root.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56683/tftpdwin-traverse.txt
Source: https://packetstormsecurity.com/files/56683/tftpdwin-traverse.txt.html