## https://sploitus.com/exploit?id=SAINT:C8B1761EC4D6884B0B58DA83CFC31809
Added: 09/12/2008
CVE: [CVE-2008-2161](<https://vulners.com/cve/CVE-2008-2161>)
BID: [29111](<http://www.securityfocus.com/bid/29111>)
OSVDB: [44904](<http://www.osvdb.org/44904>)
### Background
[TFTP Server](<http://sourceforge.net/projects/tftp-server/>) is an open source server implementation of the tftp protocol for multiple platforms.
### Problem
A buffer overflow vulnerability in the handling of error packets allows remote attackers to execute arbitrary commands.
### Resolution
[Upgrade](<http://sourceforge.net/project/showfiles.php?group_id=162512>) to version 1.6 or higher when available, if that version contains a fix. Otherwise restrict access to the tftp service.
### References
<http://www.milw0rm.com/exploits/5563>
### Limitations
Exploit works on TFTP Server SP 1.4.
A different payload is required depending upon whether the service runs as a network service or standalone. Choose the first platform if TFTP Server is running as a network service, and the second if it is running standalone.
### Platforms
Windows