CVE-2006-6184

Published: Dec 1, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command.

Affected (1)

Products: Alliedtelesyn: At Tftp

Alliedtelesyn

1 product

At Tftp

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Alliedtelesyn At Tftp	Up to 1.9

References (20)

http://secunia.com/advisories/23106

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1929

Source: cve@mitre.org

http://securityreason.com/securityalert/8120

Source: cve@mitre.org

http://www.exploit-db.com/exploits/16350

Source: cve@mitre.org

http://www.exploit-db.com/exploits/24952

Source: cve@mitre.org

http://www.osvdb.org/11350

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/452743/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21320

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/4737

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30539

Source: cve@mitre.org

http://secunia.com/advisories/23106