medium6.8Public exploit code
CVE-2008-1403
Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remote attackers to exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BootManage TFTP Server 1.99 - 'Filename' Remote Buffer Overflow2008-03-17 · remote · windows · Verified
Impact
Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remote attackers to execute arbitrary code via a request with a long filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bootmanage | Administrator | through windows |
| Bootmanage | Tftpd | through windows |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/bootixtftpd-adv.txt
- http://secunia.com/advisories/29404
- http://www.securityfocus.com/archive/1/489705/100/0/threaded
- http://www.securityfocus.com/bid/28270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41226
- http://aluigi.altervista.org/adv/bootixtftpd-adv.txt
- http://secunia.com/advisories/29404
- http://www.securityfocus.com/archive/1/489705/100/0/threaded
- http://www.securityfocus.com/bid/28270
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41226