high7.5Public exploit code
CVE-2002-2226
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TFTPD32 2.50 - 'Filename' Remote Buffer Overflow2002-11-19 · remote · windows · Verified
- TFTPD32 < 2.21 - 'Filename' Remote Buffer Overflow (Metasploit)2010-09-20 · remote · windows · Verified
Impact
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tftpd32 | Tftpd32 | through 2.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3160
- http://tftpd32.jounin.net/
- http://www.kb.cert.org/vuls/id/632633
- http://www.securiteam.com/windowsntfocus/6C00C2061A.html
- http://www.securityfocus.com/archive/1/300395
- http://www.securityfocus.com/bid/6199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10647
- http://securityreason.com/securityalert/3160
- http://tftpd32.jounin.net/
- http://www.kb.cert.org/vuls/id/632633
- http://www.securiteam.com/windowsntfocus/6C00C2061A.html
- http://www.securityfocus.com/archive/1/300395
- http://www.securityfocus.com/bid/6199
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10647