CVSS: 10.0EPSS: 2%CPEs: 2EXPL: 1CVE-2007-1645 – FutureSoft TFTP Server 2000 - Remote Overwrite (SEH)
https://notcve.org/view.php?id=CVE-2007-1645
Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812. Desbordamiento de búfer en FutureSoft TFTP Server 2000 sobre Microsoft Windows 2000 SP4 permite a atacantes remotos ejecutar código de su elección a través de una respuesta UDP sobre el puerto 69. NOTA: este asunto podría solaparse con CVE-2006-4781 o CVE-2005-1812. • https://www.exploit-db.com/exploits/3541 https://exchange.xforce.ibmcloud.com/vulnerabilities/33188 •
CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 3CVE-2006-4781 – Multi-Threaded TFTP 1.1 - GET Denial of Service
https://notcve.org/view.php?id=CVE-2006-4781
Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some details are obtained from third party information. Desbordamiento de búfer basado en montón en FutureSoft TFTP Server Multithreaded (MT) 1.1 permite a atacantes remotos provocar una denegación de servicio (caída) o posiblemente la ejecución de código de su elección mediante el envío de un paquete especialmente construido al puerto 69/UDP, el cual dispara el desbordamiento cuando construye un nombre de ruta absoluto. NOTA: Algunos detalles se han obtenido de información de terceros. • https://www.exploit-db.com/exploits/2334 http://secunia.com/advisories/21844 http://www.securityfocus.com/bid/19925 http://www.vupen.com/english/advisories/2006/3559 •
CVSS: 10.0EPSS: 55%CPEs: 1EXPL: 4CVE-2005-1812 – FutureSoft TFTP Server 2000 - Remote Denial of Service
https://notcve.org/view.php?id=CVE-2005-1812
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet. • https://www.exploit-db.com/exploits/1027 https://www.exploit-db.com/exploits/16344 http://secunia.com/advisories/15539 http://securitytracker.com/id?1014079 http://www.security.org.sg/vuln/tftp2000-1001.html http://www.securityfocus.com/bid/13821 - • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 3CVE-2005-1813
https://notcve.org/view.php?id=CVE-2005-1813
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences. • http://secunia.com/advisories/15539 http://securitytracker.com/id?1014079 http://www.security.org.sg/vuln/tftp2000-1001.html http://www.securityfocus.com/bid/13821 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •