Lucene search
+L

6 matches found

CNVD
CNVD
•added 2019/12/25 12:00 a.m.•26 views

Open TFTP Server SP Buffer Overflow Vulnerability

Open TFTP Server SP is a file transfer server. A buffer overflow vulnerability exists in TFTP Server SP version 1.66 and earlier. The vulnerability stems from a network system or product performing operations in memory without properly validating data boundaries, resulting in incorrect read and...

9.8CVSS7.4AI score0.02864EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/12/23 10:45 p.m.•34 views

CVE-2018-10388

Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet...

9.7AI score0.0436EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/12/23 10:45 p.m.•59 views

CVE-2018-10387

Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161...

9.9AI score0.02864EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/23 12:00 a.m.•10 views

CVE-2018-10387: Out-of-bounds Write

Heap-based overflow vulnerability in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or possibly execute arbitrary code via a long TFTP error packet, a different vulnerability than CVE-2008-2161...

9.8CVSS8.7AI score0.02864EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/23 12:00 a.m.•9 views

CVE-2018-10388: Use of Externally-Controlled Format String

Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute arbitrary code via format string sequences in a TFTP error packet...

9.8CVSS8.6AI score0.0436EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/04/01 12:00 a.m.•6 views

CVE-2008-1611: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request...

10CVSS6.6AI score0.67642EPSS
SaveExploits7References2
Rows per page
Query Builder