Bugtraq mailing list archives

TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability

From: liuqx () nipc org cn
Date: 17 Nov 2006 02:02:28 -0000

A vulnerability has been identified in TFTP Server TFTPD32 v3.01, which could be exploited by attackers to cause a 
denial of service. It was due to the title of the gauge window which was limited to 256 char --> not enough to store 
the file name and the client address. 
The user can download newly version of the tftp server(http://philippe.jounin.net/tftpd32_download.html)

Current thread:

TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability liuqx (Nov 17)