Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or (2) WRQ operation.
References
Link | Resource |
---|---|
http://secpod.org/blog/?p=419 | Exploit |
Configurations
Information
Published : 2014-12-27 16:59
Updated : 2014-12-29 08:20
NVD link : CVE-2011-4720
Mitre link : CVE-2011-4720
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
hillstone_software
- hs_tftp_server