Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-4882
tftpd
cve-2005-4882
philippe jounin
denial of service
remote attackers
daemon crash
tftpd32
wyse simple imager
wsi
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.7 Medium
AI Score
Confidence
High
0.5 Medium
EPSS
Percentile
97.5%
tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability than CVE-2002-2226.
Affected configurations
Node
philippe_jounintftpd32Range≤2.74
ORphilippe_jounintftpd32Match2.5
ORphilippe_jounintftpd32Match2.5beta
ORphilippe_jounintftpd32Match2.51
ORphilippe_jounintftpd32Match2.52
ORphilippe_jounintftpd32Match2.53
ORphilippe_jounintftpd32Match2.54
ORphilippe_jounintftpd32Match2.60
ORphilippe_jounintftpd32Match2.62
ORphilippe_jounintftpd32Match2.70
ORphilippe_jounintftpd32Match2.72
ORphilippe_jounintftpd32Match2.73
Related
nvd
nvd
CVE-2005-4882
2009-11-20 19:30:00
CVE-2002-2226
2002-12-31 05:00:00
cvelist
cvelist
CVE-2005-4882
2022-10-03 16:22:45
CVE-2002-2226
2007-09-23 23:00:00
cve
cve
CVE-2002-2226
2007-09-23 23:00:00
packetstorm
packetstorm
TFTPD32 <= 2.21 Long Filename Buffer Overflow
2009-11-26 00:00:00
cert
cert
Wyse Simple Imager (WSI) includes vulnerable versions of TFTPD32
2009-11-19 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.7 Medium
AI Score
Confidence
High
0.5 Medium
EPSS
Percentile
97.5%
Related for CVE-2005-4882