CVE-2007-2639

CVE-2007-2639 affects TFTPdWin 0.4.2 with a directory traversal vulnerability that lets remote attackers read or modify arbitrary files outside the TFTP root via unspecified vectors. The connected documents confirm the vulnerability type but do not provide concrete exploitation details, affected ...

CVE-2006-4948

CVE-2006-4948 affects ProSysInfo TFTPDWIN 0.4.2 and earlier. A stack-based buffer overflow in tftpd.exe can be triggered by a long filename sent to the TFTP server, allowing remote attackers to cause arbitrary code execution or a denial of service. Public references show a long filename vulnerabi...

CVE-2007-1404

This CVE concerns ProSysInfo TFTPDWIN 0.4.2’s tftpd.exe, where a remote attacker can trigger a denial of service by sending a long UDP packet to recv_from. Several sources describe a long filename input leading to a stack/buffer overflow, with exploit code and mitigations tied to CVE-2006-4948 re...