Vulnerability in Atftpd

CVE-2003-0380

Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.

EPSS: 0.058 (92.3th percentile) — read the EPSS interpretation.

Affected products

  • Atftpd — versions 0.6.0, 0.6.1.1
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
  • cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_VULN-DEV)
  • cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)