iDefense Security Advisory 07.17.07: IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability

IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability iDefense Security Advisory 07.17.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 17, 2007 I. BACKGROUND IBM Corp.'s Tivoli Provisioning Manager for OS Deployment is a network boot server that...

CVE-2007-3268

Summary (CVE-2007-3268) : IBM Tivoli Provisioning Manager for OS Deployment (5.1 before Fix Pack 3) is affected by a DoS in the TFTPD TFTP implementation. A malformed read request (RRQ) with an invalid blksize triggers an integer division by zero, causing rembo.exe to crash and multiple services ...