Lucene search
K

16 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в atftp

There is an exploitable denial-of-service vulnerability in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests triggers an assert call, resulting in a denial-of-service attack. An attacker can send a sequence of malicious packets...

7.5CVSS7.1AI score0.00288EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:2 a.m.2 views

SUSE CVE-2009-2957

Heap-based buffer overflow in the tftprequest function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read aka RRQ request...

6.8CVSS8.3AI score0.08525EPSS
Exploits7References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:3 a.m.2 views

SUSE CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

7.5CVSS6.9AI score0.00288EPSS
Exploits1References4
Cvelist
Cvelist
added 2021/11/29 10:8 p.m.12 views

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

7.5AI score0.01353EPSS
Exploits1References1
CVE
CVE
added 2021/11/29 10:8 p.m.94 views

CVE-2021-44428

Technical details for CVE-2021-44428 are not provided in the supplied documents; only a basic description is available. Monitor for updates, as connected sources focus on other vulnerabilities (e.g., Log4j) rather than this CVE.

7.5CVSS8.1AI score0.01353EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/11/29 10:8 p.m.31 views

CVE-2021-44429

CVE-2021-44429: Serva 4.4.0 suffers a denial-of-service via a TFTP read (RRQ) request (opcode 1), tied to the older CVE-2013-0145. Connected records confirm that CVE-2013-0145 describes a buffer overflow in the TFTPD service (Serva32 2.1.0) that could cause a daemon crash or, potentially, arbitra...

7.5CVSS7.3AI score0.00801EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2020/09/10 3:15 p.m.1 views

DEBIAN-CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

7.5CVSS7.5AI score0.00288EPSS
Exploits1References1
NVD
NVD
added 2020/09/10 3:15 p.m.15 views

CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

7.5CVSS0.00288EPSS
Exploits1References3
OSV
OSV
added 2020/09/10 3:15 p.m.1 views

UBUNTU-CVE-2020-6097

An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to trigger...

7.5CVSS7.1AI score0.00288EPSS
Exploits1References4
Talos
Talos
added 2020/08/26 12:0 a.m.28 views

atftpd daemon Denial of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in the atftpd daemon functionality of atftp 0.7.git20120829-3.1+b1. A specially crafted sequence of RRQ-Multicast requests trigger an assert call resulting in denial-of-service. An attacker can send a sequence of malicious packets to...

7.5CVSS7.5AI score0.00288EPSS
Exploits1
NVD
NVD
added 2013/12/12 5:55 p.m.15 views

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

7.3CVSS6.2AI score0.10271EPSS
Exploits1References3
Prion
Prion
added 2013/12/12 5:55 p.m.25 views

Design/Logic Flaw

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

5CVSS6.8AI score0.10271EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2013/12/12 5:55 p.m.2 views

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

7.3CVSS5.4AI score0.10271EPSS
Exploits1References4
Cvelist
Cvelist
added 2013/12/12 5:0 p.m.20 views

CVE-2013-7030

The TFTP service in Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to obtain sensitive information from a phone via an RRQ operation, as demonstrated by discovering a cleartext UseUserCredential field in an SPDefault.cnf.xml file. NOTE: the vendor reportedly...

6.2AI score0.10271EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2012/01/11 12:0 a.m.25 views

TFTP Server 1.4 ST RRQ Overflow

!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...

0.3AI score
Exploits0
seebug.org
seebug.org
added 2005/06/02 12:0 a.m.15 views

FutureSoft TFTP Server 2000 Remote Denial of Service Exploit

No description provided by source. / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected]...

7.1AI score
Exploits0
Rows per page
Query Builder