TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability

Subject: TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability
Date: 17 Nov 2006 02:02:28 -0000
From: suppressed

A vulnerability has been identified in TFTP Server TFTPD32 v3.01, which could be exploited by attackers to cause a denial of service. It was due to the title of the gauge window which was limited to 256 char --> not enough to store the file name and the client address. 
The user can download newly version of the tftp server(http://philippe.jounin.net/tftpd32_download.html)

Prev by Date: 20/20 real estate [ multiples injection sql ]
Next by Date: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
Previous by thread: 20/20 real estate [ multiples injection sql ]
Next by thread: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
Index(es):
- Date
- Thread

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.