Date: 17 Nov 2006 02:02:28 -0000
From: [email protected]
To: [email protected]Subject: TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow
Vulnerability
X-Virus-Scanned: antivirus-gw at tyumen.ru
A vulnerability has been identified in TFTP Server TFTPD32 v3.01, which could be exploited by attackers to cause a denial of service. It was due to the title of the gauge window which was limited to 256 char --> not enough to store the file name and the client address.
The user can download newly version of the tftp server(http://philippe.jounin.net/tftpd32_download.html)