PT-2009-2955 · K23Productions · Tftputil Gui

CVE-2009-0289 · Publicado 2009-01-27 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions k23productions TFTPUtil GUI versions 1.2.0 through 1.3.0

Description The issue allows remote attackers to cause a denial of service, resulting in a service crash. This can be achieved by sending a crafted request with a long filename.

Recommendations For versions 1.2.0 through 1.3.0, as a temporary workaround, consider restricting the length of filenames in requests to prevent the service from crashing.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-0289

Produtos afetados

Tftputil Gui

Referências · 5

• http://securityfocus.com/archive/1/500107/100/0/threaded · Nota
• http://princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0289 · Nota de Segurança
• http://securityfocus.com/bid/33289 · Correção
• http://sourceforge.net/forum/forum.php?forum_id=894598 · Correção