CVE-2004-1485 Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
Affected products
No affected product data has been published yet.
References
- 20041026 inetutils tftp client, DNS resolving bofs mailing-list
- 11527 vdb-entry
- inetutils-tftp-dns-bo(17878) vdb-entry
- Debian Security Tracker CVE-2004-1485 vendor-advisory