medium5.0
CVE-2013-6809
Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code …
Impact
Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remote File field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Philippe Jounin | Tftpd32 | through 4.00 Versions 1.0, 1.1, 2.0, 2.1, 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/100511
- http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html
- http://seclists.org/fulldisclosure/2013/Dec/15
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89455
- http://osvdb.org/100511
- http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html
- http://seclists.org/fulldisclosure/2013/Dec/15
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89455