CVE-2011-4720
Hillstone Software HS Tftp Server - Improper Input Validation
Title source: ruleDescription
Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or (2) WRQ operation.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by SecPod Research · textdoswindows
https://www.exploit-db.com/exploits/18188
References (1)
Core 1
Core References
Exploit x_refsource_misc
http://secpod.org/blog/?p=419
Scores
EPSS
0.2023
EPSS Percentile
95.5%
Details
CWE
CWE-20
Status
published
Products (1)
hillstone_software/hs_tftp_server
1.3.2
Published
Dec 28, 2014
Tracked Since
Feb 18, 2026