CVE-2006-0328

Published: Jan 21, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.

Affected (1)

Products: Philippe Jounin: Tftpd32

Philippe Jounin

1 product

Tftpd32

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Philippe Jounin Tftpd32	Version 2.81

References (20)

http://secunia.com/advisories/18539

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/362

Source: cve@mitre.org

http://www.critical.lt/?vulnerabilities/200

Source: cve@mitre.org

ExploitVendor Advisory

http://www.critical.lt/research/tftpd32_281_dos.txt

Source: cve@mitre.org

Exploit

http://www.kb.cert.org/vuls/id/632633

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/22661

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/422405/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16333

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0263

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24250

Source: cve@mitre.org

http://secunia.com/advisories/18539