Lucene search

K
cveMitreCVE-2006-6184
HistoryDec 01, 2006 - 12:28 a.m.

CVE-2006-6184

2006-12-0100:28:00
mitre
web.nvd.nist.gov
29
cve-2006-6184
allied telesyn
tftp server
buffer overflow
denial of service
remote code execution

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.721

Percentile

98.1%

Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command.

Affected configurations

Nvd
Node
alliedtelesynat-tftpRange1.9
VendorProductVersionCPE
alliedtelesynat-tftp*cpe:2.3:a:alliedtelesyn:at-tftp:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.721

Percentile

98.1%