Unscored CVE-2013-6809 EUVD-2013-6611GHSA-3795-4m6r-47rj

Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly exe…

Published Dec 13, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Description

Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remote File field.

References

100511 vdb-entry
http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html
tftpd32-cve20136809-format-string(89455) vdb-entry
20131203 Tftpd32 Client Side Format String Vulnerability mailing-list