CVE-2008-1620: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in 2X TFTP service TFTPd.exe 3.2.0.0 and earlier in 2X ThinClientServer 5.0sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... dot dot dot in the filename...

2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal

2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal source: https://www.securityfocus.com/bid/28504/info 2X ThinClientServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacke...

CVE-2007-1404

This CVE concerns ProSysInfo TFTPDWIN 0.4.2’s tftpd.exe, where a remote attacker can trigger a denial of service by sending a long UDP packet to recv_from. Several sources describe a long filename input leading to a stack/buffer overflow, with exploit code and mitigations tied to CVE-2006-4948 re...

CVE-2007-1404: Undefined Security Weakness

tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recvfrom call. NOTE: this issue might be related to CVE-2006-4948...

CVE-2006-4948: Undefined Security Weakness

Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party...