Description
The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
PacketTrap TFTP Server 2.2.5459.0 DoS
auxiliary/dos/windows/tftp/pt360_write
Exploit-DB 1
- PacketTrap TFTPD 2.2.5459.0 - Remote Denial of Service EDB-6863 · dos · Oct 29, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20080310 Denial of Service in PacketTrap TFTP server 2.0.3901.0 mailing-list
- 28187 vdb-entry
- pt360-tftpserver-filename-dos(41073) vdb-entry
- http://aluigi.org/testz/tftpx.zip
- ADV-2008-0811 vdb-entry
- http://aluigi.altervista.org/adv/packettrash-adv.txt
- 29308 third-party-advisory
- 3734 third-party-advisory