2 matches found
Sql injection
tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recvfrom call. NOTE: this issue might be related to CVE-2006-4948...
7.3CVSS6.8AI score0.66738EPSS
SaveExploits7References4Affected Software1
CVE-2007-1404
This CVE concerns ProSysInfo TFTPDWIN 0.4.2’s tftpd.exe, where a remote attacker can trigger a denial of service by sending a long UDP packet to recv_from. Several sources describe a long filename input leading to a stack/buffer overflow, with exploit code and mitigations tied to CVE-2006-4948 re...
7.3CVSS6.6AI score0.66738EPSS
SaveExploits2References4Affected Software1
20