Sploitus

Exploit for TFTP Server error packet buffer overflow

saint Β· 2008-09-12

Exploit Code

MARKDOWN33 lines
## https://sploitus.com/exploit?id=SAINT:C8B1761EC4D6884B0B58DA83CFC31809
Added: 09/12/2008  
CVE: [CVE-2008-2161](<https://vulners.com/cve/CVE-2008-2161>)  
BID: [29111](<http://www.securityfocus.com/bid/29111>)  
OSVDB: [44904](<http://www.osvdb.org/44904>)  


### Background

[TFTP Server](<http://sourceforge.net/projects/tftp-server/>) is an open source server implementation of the tftp protocol for multiple platforms. 

### Problem

A buffer overflow vulnerability in the handling of error packets allows remote attackers to execute arbitrary commands. 

### Resolution

[Upgrade](<http://sourceforge.net/project/showfiles.php?group_id=162512>) to version 1.6 or higher when available, if that version contains a fix. Otherwise restrict access to the tftp service. 

### References

<http://www.milw0rm.com/exploits/5563>  


### Limitations

Exploit works on TFTP Server SP 1.4. 

A different payload is required depending upon whether the service runs as a network service or standalone. Choose the first platform if TFTP Server is running as a network service, and the second if it is running standalone. 

### Platforms

Windows