Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command.
Name | Vendor | Start Version | End Version |
---|---|---|---|
At-tftp | Alliedtelesyn | * | 1.9 (including) |