Page 2 of 8 results (0.010 seconds)

CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 3

WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow. • http://secunia.com/advisories/11840 http://securitytracker.com/id?1010464 http://www.osvdb.org/6848 http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt http://www.securityfocus.com/bid/10526 https://exchange.xforce.ibmcloud.com/vulnerabilities/16390 •

CVSS: 5.0EPSS: 2%CPEs: 1EXPL: 1

tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux. • http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html http://www.kb.cert.org/vuls/id/632633 https://exchange.xforce.ibmcloud.com/vulnerabilities/10817 • CWE-20: Improper Input Validation •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 2

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command. • http://archives.neohapsis.com/archives/bugtraq/2001-06/0227.html http://www.securityfocus.com/bid/2886 http://www.sentry-labs.com/files/cisco0201061701.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/6722 •