Lucene search
HistoryFeb 13, 2005 - 5:00 a.m.
CVE-2004-1485
cve-2004-1485
buffer overflow
inetutils
tftp client
remote code execution
dns
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.0%
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
Affected configurations
Node
gnuinetutilsMatch1.4.2
ORtftptftpMatch0.29
ORtftptftpMatch0.32
ORtftptftpMatch0.34
ORtftptftpMatch0.36
ORtftptftpMatch0.38
Related
nvd
nvd
CVE-2004-1485
2004-12-31 05:00:00
debiancve
debiancve
CVE-2004-1485
2005-02-13 05:00:00
cvelist
cvelist
CVE-2004-1485
2005-02-13 05:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.0%
Related for CVE-2004-1485