https://blog.modpr0.be/2012/04/09/distinct-tftp-server-3-10-directory-traversal-vulnerability/