CVE-2004-1636

CRITICO 10.0CVE-2004-1636 · Published 26/10/2004 · updated 16/06/2026

In breve

CVE-2004-1636 è una vulnerabilità CRITICO (CVSS 10.0) che riguarda wvtftp (net integration technologies inc.).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.3%, superiore al 95.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
wvtftp net_integration_technologies_inc.	`= 0.9`	No fix yet

Description

Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.

References

marc.info
secunia.com/advisories/12986 · Exploit
securityfocus.com/bid/11525 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/17869

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free