PT-2009-2955 · K23Productions · Tftputil Gui

CVE-2009-0289 · Published 2009-01-27 · Updated 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions k23productions TFTPUtil GUI versions 1.2.0 through 1.3.0

Description The issue allows remote attackers to cause a denial of service, resulting in a service crash. This can be achieved by sending a crafted request with a long filename.

Recommendations For versions 1.2.0 through 1.3.0, as a temporary workaround, consider restricting the length of filenames in requests to prevent the service from crashing.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-0289

Affected Products

Tftputil Gui

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-0289 · Security Note
• http://securityfocus.com/bid/33289 · Patch
• http://sourceforge.net/forum/forum.php?forum_id=894598 · Patch
• http://securityfocus.com/archive/1/500107/100/0/threaded · Note
• http://princeofnigeria.org/blogs/index.php/2009/01/14/tftputil-gui-tftp-server-denial-of-servi?blog=1 · Note