CVE-2002-2237
tftp32 TFTP server <= 2.21 - Denial of Service via DOS Device Name GET Request
Title source: llmDescription
tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10817
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/632633
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html
Scores
EPSS
0.0176
EPSS Percentile
75.4%
Details
CWE
CWE-20
Status
published
Products (1)
tftp/tftp_server
2.21
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026