CVEvulnerability
CVE-2013-6809
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-134
Description
Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remote File field.
Affected configurations
• philippe jounin tftpd32 (<= 4.00)
• philippe jounin tftpd32 1.0
• philippe jounin tftpd32 1.1
• philippe jounin tftpd32 2.0
• philippe jounin tftpd32 2.1
• philippe jounin tftpd32 2.2
• philippe jounin tftpd32 2.11
• philippe jounin tftpd32 2.21
• philippe jounin tftpd32 2.51
• philippe jounin tftpd32 2.52
• philippe jounin tftpd32 2.53
• philippe jounin tftpd32 2.54
• philippe jounin tftpd32 2.60
• philippe jounin tftpd32 2.62
• philippe jounin tftpd32 2.70
• philippe jounin tftpd32 2.71
• philippe jounin tftpd32 2.72
• philippe jounin tftpd32 2.73
• philippe jounin tftpd32 2.74
• philippe jounin tftpd32 2.80
• philippe jounin tftpd32 2.81
• philippe jounin tftpd32 2.82
• philippe jounin tftpd32 2.83
• philippe jounin tftpd32 2.84
• philippe jounin tftpd32 3.00
• philippe jounin tftpd32 3.01
• philippe jounin tftpd32 3.02
• philippe jounin tftpd32 3.03
• philippe jounin tftpd32 3.10
• philippe jounin tftpd32 3.20
• philippe jounin tftpd32 3.22
• philippe jounin tftpd32 3.23
• philippe jounin tftpd32 3.26
• philippe jounin tftpd32 3.27
• philippe jounin tftpd32 3.28
• philippe jounin tftpd32 3.29
• philippe jounin tftpd32 3.31
• philippe jounin tftpd32 3.33
• philippe jounin tftpd32 3.34
• philippe jounin tftpd32 3.35
• philippe jounin tftpd32 3.50
• philippe jounin tftpd32 3.51
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://osvdb.org/100511 osvdb.org
- http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html Exploit
- http://seclists.org/fulldisclosure/2013/Dec/15 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89455 exchange.xforce.ibmcloud.com
- http://osvdb.org/100511 osvdb.org
- http://packetstormsecurity.com/files/124275/Tftpd32-Client-Side-Format-String.html Exploit
- http://seclists.org/fulldisclosure/2013/Dec/15 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89455 exchange.xforce.ibmcloud.com