|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability
liuqx
nipc.org.cn
Date: Thu Nov 16 2006 - 20:02:28 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
A vulnerability has been identified in TFTP Server TFTPD32 v3.01, which could be exploited by attackers to cause a denial of service. It was due to the title of the gauge window which was limited to 256 char --> not enough to store the file name and the client address.
The user can download newly version of the tftp server(http://philippe.jounin.net/tftpd32_download.html)
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]