NetSight
IP …
medium4.3Public exploit code

CVE-2009-2958

The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dere…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.

Affected products

VendorProductAffected versions
ThekelleysDnsmasq
through 2.49
Versions 0.4, 0.5, 0.6, 0.7, 0.95

Weakness classification

CWE-399

References