critical10.0Public exploit code
CVE-2004-1636
Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WvTFTPd 0.9 - Remote Heap Overflow2004-10-28 · remote · linux · Verified
Impact
Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Net Integration Technologies Inc. | Wvtftp | Version 0.9 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109885074513940&w=2
- http://secunia.com/advisories/12986
- http://www.securityfocus.com/bid/11525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17869
- http://marc.info/?l=bugtraq&m=109885074513940&w=2
- http://secunia.com/advisories/12986
- http://www.securityfocus.com/bid/11525
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17869