3 results (0.003 seconds)

CVSS: 10.0EPSS: 2%CPEs: 2EXPL: 1

Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812. Desbordamiento de búfer en FutureSoft TFTP Server 2000 sobre Microsoft Windows 2000 SP4 permite a atacantes remotos ejecutar código de su elección a través de una respuesta UDP sobre el puerto 69. NOTA: este asunto podría solaparse con CVE-2006-4781 o CVE-2005-1812. • https://www.exploit-db.com/exploits/3541 https://exchange.xforce.ibmcloud.com/vulnerabilities/33188 •

CVSS: 10.0EPSS: 55%CPEs: 1EXPL: 4

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet. • https://www.exploit-db.com/exploits/1027 https://www.exploit-db.com/exploits/16344 http://secunia.com/advisories/15539 http://securitytracker.com/id?1014079 http://www.security.org.sg/vuln/tftp2000-1001.html http://www.securityfocus.com/bid/13821 - • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 3

Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences. • http://secunia.com/advisories/15539 http://securitytracker.com/id?1014079 http://www.security.org.sg/vuln/tftp2000-1001.html http://www.securityfocus.com/bid/13821 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •