CVE-2004-1636

NET Integration Technologies. Wvtftp - Buffer Overflow

Title source: rule

Description

Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.

Exploits (1)

exploitdb WORKING POC VERIFIED

by infamous41md · cremotelinux

https://www.exploit-db.com/exploits/608

View Code ZIP pw:eip

References (4)

[Mailing List] http://marc.info/?l=bugtraq&m=109885074513940&w=2

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/17869

[Exploit, Vendor Advisory] http://www.securityfocus.com/bid/11525

[Exploit, Patch, Vendor Advisory] http://secunia.com/advisories/12986

Scores

EPSS 0.1017

EPSS Percentile 93.1%

Details

Status published

Products (1)

net_integration_technologies_inc./wvtftp 0.9

Published Oct 26, 2004

Tracked Since Feb 18, 2026