critical10.0Public exploit code
CVE-2008-1611
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filenam…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TFTP Server 1.4 - ST WRQ Buffer Overflow (Metasploit)2012-04-20 · remote · windows · Verified
- TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow2012-01-10 · remote · windows · Verified
- TFTP Server 1.4 - ST Buffer Overflow2008-03-26 · remote · windows · Verified
Impact
Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tftp-Server | Winagents Tftp Server | Version sp_1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29508
- http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt
- http://www.securityfocus.com/bid/28462
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41496
- https://www.exploit-db.com/exploits/5314
- http://secunia.com/advisories/29508
- http://www.offensive-security.com/0day/sourceforge-tftpd.py.txt
- http://www.securityfocus.com/bid/28462
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41496
- https://www.exploit-db.com/exploits/5314