CVE-2007-1404 tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recv_from call. NOTE: this issue might b...
HighCVSS 7.3
EPSS 68.1%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recv_from call. NOTE: this issue might be related to CVE-2006-4948.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| prosysinfo tftp server tftpdwin | = 0.4.2 | No fix listed |
References
- 33919 vdb-entry
- 24452 third-party-advisory vendor-advisory
- tftpdwin-recvfrom-dos(32886) vdb-entry
- 3432 exploit