A remote overflow exists in AT-TFTP. The server fails to properly check bounds on the remote filename supplied, resulting in a buffer overflow. With a specially crafted request, an attacker can cause a denial of service and possibly arbitrary code execution, resulting in a loss of integrity and/or availability.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Solution:
Solution Unknown
Exploit:
Exploit Public
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
autistici.org -
http://aluigi.altervista.org