CVE-2007-1435
D-Link TFTP Server 1.0 - Denial of Service via Long GET or PUT Request
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1435.
PoCs published by Metasploit, LSO, including Metasploit module exploits/windows/tftp/dlink_long_filename.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in D-Link TFTP 1.0 via a UDP request with an overly long filename, allowing arbitrary code execution. It includes specific return addresses for Windows 2000 SP3/SP4 and uses a bind payload for exploitation.
Description
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request, which triggers memory corruption. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (3)
This exploit targets a stack buffer overflow in D-Link TFTP 1.0 via a UDP request with an overly long filename, allowing arbitrary code execution. It includes specific return addresses for Windows 2000 SP3/SP4 and uses a bind payload for exploitation.
This Metasploit module exploits a stack-based buffer overflow in D-Link TFTP 1.0 via a maliciously crafted UDP packet with an overly long filename. It includes a payload delivery mechanism for remote code execution on vulnerable Windows systems.
This Metasploit module exploits a stack buffer overflow in D-Link TFTP 1.0 by sending a UDP request with an overly long filename, leading to arbitrary code execution. It includes specific return addresses for Windows 2000 SP3/SP4 targets and a structured payload delivery mechanism.