CVE-2002-2226
Tftpd32 < 2.21 - Memory Corruption
Title source: ruleDescription
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
Exploits (3)
metasploit
WORKING POC
NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/tftp/tftpd32_long_filename.rb
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16349
exploitdb
WORKING POC
VERIFIED
by Aviram Jenik · perlremotewindows
https://www.exploit-db.com/exploits/22025
References (7)
Scores
EPSS
0.7836
EPSS Percentile
99.0%
Classification
CWE
CWE-119
Status
draft
Affected Products (1)
tftpd32/tftpd32
< 2.21
Timeline
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026