This host is running OpenTFTP Server and is prone to buffer overflow vulnerability.

Successful exploitation will allow attackers to cause denial of service attacks.

Upgrade to OpenTFTP Server SP version 1.5 or later For updates refer to http://sourceforge.net/projects/tftp-server/

The flaw is due to a boundary error in the handling of filenames and can be exploited to cause a stack-based buffer overflow via a read request with an overly long filename.

OpenTFTP Server SP version 1.4

• http://packetstormsecurity.org/files/108546/tftprrq-overflow.txt
• http://secunia.com/advisories/29508
• http://securityreason.com/securityalert/8552
• http://www.exploit-db.com/exploits/18345/

---

Updated on 2015-03-25