CVE-2008-1611

TFTP Server SP 1.4 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 5 public exploits for CVE-2008-1611. PoCs published by Metasploit, b33f, muts, including Metasploit module exploits/windows/tftp/tftpserver_wrq_bof.

AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in TFTP Server for Windows 1.4 ST via a malformed WRQ request, leading to remote code execution. The exploit leverages a SEH overwrite and a jump back to a NOP sled to execute payloads.

Description

Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.

Exploits (5)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18759

This Metasploit module exploits a buffer overflow in TFTP Server for Windows 1.4 ST via a malformed WRQ request, leading to remote code execution. The exploit leverages a SEH overwrite and a jump back to a NOP sled to execute payloads.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TFTP Server for Windows 1.4 ST
No auth needed
Prerequisites: Target must be running TFTP Server for Windows 1.4 ST · Knowledge of whether the service is running as a 'Service' or 'Standalone'
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by b33f · pythonremotewindows
https://www.exploit-db.com/exploits/18345

This exploit targets a buffer overflow vulnerability in TFTP Server v1.4 via a malformed Read Request (RRQ) packet. It leverages a reverse shell payload to achieve remote code execution on Windows XP SP3.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TFTP Server v1.4
No auth needed
Prerequisites: Network access to the target TFTP server · Target running TFTP Server v1.4 on Windows XP SP3
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by muts · pythonremotewindows
https://www.exploit-db.com/exploits/5314

This exploit targets a buffer overflow vulnerability in TFTP Server for Windows V1.4 ST. It sends a maliciously crafted UDP packet to trigger a bind shell on port 4444, leveraging shellcode for remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TFTP Server for Windows V1.4 ST
No auth needed
Prerequisites: Network access to the target's TFTP service (UDP port 69) · Target running TFTP Server for Windows V1.4 ST
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 1 stars
by Axua · poc
https://github.com/Axua/CVE-2008-1611

This is a functional exploit for CVE-2008-1611, targeting a buffer overflow vulnerability in TFTPServerSP.exe via a crafted UDP packet. The payload includes shellcode, SEH overwrite, and a structured buffer to achieve remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TFTPServerSP.exe (likely version 1.4 or earlier)
No auth needed
Prerequisites: Network access to the target's TFTP service (UDP port 69) · Vulnerable version of TFTPServerSP.exe running on the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →
metasploit WORKING POC NORMAL
by Mati Aharoni, Datacut · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/tftp/tftpserver_wrq_bof.rb

This Metasploit module exploits a buffer overflow in TFTP Server for Windows 1.4 ST via a malformed WRQ request, leading to remote code execution. The exploit leverages a stack-based overflow by manipulating the filename parameter in the WRQ packet, with specific offsets for different Windows versions and service modes.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TFTP Server for Windows 1.4 ST
No auth needed
Prerequisites: Target must be running TFTP Server for Windows 1.4 ST · Knowledge of whether the TFTP server is running as a service or standalone
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (5)

Core 5
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29508
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41496
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28462
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5314

Scores

EPSS 0.6764
EPSS Percentile 99.2%

Details

CWE
CWE-119
Status published
Products (1)
tftp-server/winagents_tftp_server sp_1.4
Published Apr 01, 2008
Tracked Since Feb 18, 2026