TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability

A vulnerability has been identified in TFTP Server TFTPD32 v3.01, which could be exploited by attackers to cause a denial of service. It was due to the title of the gauge window which was limited to 256 char -- not enough to store the file name and the client address. The user can download newly...

ProSysInfo TFTPDWIN远程栈溢出漏洞

TFTPDWIN是Windows平台下的一款多线程的TFTP协议服务器。 TFTPDWIN在处理用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 TFTPDWIN的tftpd.exe在处理请求的资源时存在栈溢出漏洞。如果用户使用超长名称（大于280字节）请求了资源的话，就会触发这个漏洞，导致执行任意指令。 ProSysInfo TFTPDWIN 0.4.2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.prosysinfo.com.pl/tftpserver/...

CVE-2006-4948

Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4948

Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4948

CVE-2006-4948 affects ProSysInfo TFTPDWIN 0.4.2 and earlier. A stack-based buffer overflow in tftpd.exe can be triggered by a long filename sent to the TFTP server, allowing remote attackers to cause arbitrary code execution or a denial of service. Public references show a long filename vulnerabi...

[SA21854] TFTP Server TFTPDWIN Buffer Overflow Vulnerability

TITLE: TFTP Server TFTPDWIN Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA21854 VERIFY ADVISORY: http://secunia.com/advisories/21854/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network SOFTWARE: TFTP Server TFTPDWIN 0.x http://secunia.com/product/11921/...

TFTPDWIN TFTP server buffer overflow

Buffer overflow on oversized requested resource filename...

CVE-2006-4781

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

CVE-2006-4781

CVE-2006-4781 describes a heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1. A crafted UDP packet sent to port 69 allows a remote attacker to cause a crash (DoS) or possibly run arbitrary code during absolute-path-name construction. The description notes that some detail...

CVE-2006-4781

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...

FutureSoft TFTP Server 2000 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the FutureSoft TFTP Server 2000 product. By sending an overly long transfer-mode string, we were able to overwrite both the SEH and the saved EIP. A subsequent write-exception that will occur allows the transferring of execution to our shellcode via...

Multi-Threaded TFTP 1.1 - GET Denial of Service

Multi-Threaded TFTP 1.1 - GET Denial of Service !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is...

Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================================== Multithreaded TFTP And any-one else i forgot ^ ^. \DEBUG INF0// First chance exceptions are reported before any exception handling. This exception may be expected and handled...

CVE-2006-3288

Unspecified vulnerability in the TFTP server in Cisco Wireless Control System WCS for Linux and Windows before 3.251, when configured to use a directory path name that contains a space character, allows remote authenticated users to read and overwrite arbitrary files via unspecified vectors...

[SA19844] WinAgents TFTP Server Directory Traversal Vulnerability

TITLE: WinAgents TFTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19844 VERIFY ADVISORY: http://secunia.com/advisories/19844/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: WinAgents TFTP Server 3.x...

CVE-2006-1952

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

Directory traversal

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...

CVE-2006-1951

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

Directory traversal

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...

CVE-2006-1952

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...