Info

Disclosure

Nov 03, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in AT-TFTP. The server fails to properly check bounds on the remote filename supplied, resulting in a buffer overflow. With a specially crafted request, an attacker can cause a denial of service and possibly arbitrary code execution, resulting in a loss of integrity and/or availability.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Solution: Solution Unknown
Exploit: Exploit Public

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Allied Telesyn

AT-TFTP Server

1.8

References

Security Tracker: 1012011
Related OSVDB ID: 11349
Metasploit ID: 11350
ISS X-Force ID: 17925
Other Advisory URL: http://aluigi.altervista.org/adv/attftp-adv.txt
Vendor URL: http://www.alliedtelesyn.co.nz/support/rapier/download.html

Credit

Luigi Auriemma - aluigiautistici.org - http://aluigi.altervista.org

Direct URL: http://osvdb.org/11350