CVE-2013-6809

Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remote File field.

🔗 References (8)

• cve@mitrehttp://osvdb.org/100511
• cve@mitrehttp://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html
• cve@mitrehttp://seclists.org/fulldisclosure/2013/Dec/15
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/89455
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/100511
• af854a3a-2127-422b-91ae-364da2661108http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html
• af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2013/Dec/15
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/89455