OSVDB ID: 11350

Title: AT-TFTP server Parameter Overflow DoS

Info

Disclosure

Nov 03, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in AT-TFTP. The server fails to properly check bounds on the remote filename supplied, resulting in a buffer overflow. With a specially crafted request, an attacker can cause a denial of service and possibly arbitrary code execution, resulting in a loss of integrity and/or availability.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Solution: Solution Unknown
Exploit: Exploit Public

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Allied Telesyn

AT-TFTP Server

1.8

References

Credit

  • Luigi Auriemma - aluigiautistici.org - http://aluigi.altervista.org


Direct URL: http://osvdb.org/11350