CVE-2006-6184
Allied Telesyn AT-TFTP < 1.9 - Stack-Based Buffer Overflow via Long Filename in GET or PUT Command
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2006-6184.
PoCs published by xis_one, Metasploit, Jacopo Cervini, including Metasploit module exploits/windows/tftp/attftp_long_filename.
AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in AT-TFTP 2.0, leading to a denial-of-service (DoS) condition. It sends a maliciously crafted UDP packet to trigger a crash, with two variants: one attempting SEH overwrite and another causing a read access violation.
Description
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command.
Exploits (7)
This exploit demonstrates a stack-based buffer overflow in AT-TFTP 2.0, leading to a denial-of-service (DoS) condition. It sends a maliciously crafted UDP packet to trigger a crash, with two variants: one attempting SEH overwrite and another causing a read access violation.
This exploit targets a stack buffer overflow in AT-TFTP v1.9 by sending a maliciously crafted UDP packet with an overly long filename. It leverages a JMP ESP instruction to redirect execution to the payload, achieving remote code execution.
This exploit targets a buffer overflow vulnerability in ATFTP server via a maliciously crafted UDP packet. It includes shellcode to execute calc.exe on Windows 2000 Server SP4 Italian, leveraging a specific return address in IMM32.dll.
This exploit targets a remote buffer overflow in TFTP Daemon Version 1.9, leading to a denial of service (DoS). It sends a maliciously crafted packet with an oversized buffer to trigger the vulnerability.
This repository contains a functional Python exploit for CVE-2006-6184, targeting a stack-based buffer overflow in Allied Telesyn TFTP Server 1.9. The exploit includes detailed instructions for generating a custom payload using Metasploit and sends a crafted UDP packet to trigger the vulnerability.
This repository contains a functional Python-based exploit for CVE-2006-6184, targeting a stack-based buffer overflow in Allied Telesyn TFTP Server 1.9. The exploit includes a payload generator and a UDP-based attack script to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in AT-TFTP v1.9 by sending a crafted UDP request with an overly long filename, leading to remote code execution. It includes multiple return addresses for various Windows versions and a payload delivery mechanism.