tftp records
4 published records for vendor tftp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2008-2161Weaponized | Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code viatftp · tftp server sp · CWE-119 | Critical10.0 | — | 65.2% | May 12, 2008 |
31Monitor | CVE-2004-1485No exploit | Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS responsetftp · tftp | High7.5 | — | 2.4% | Dec 31, 2004 |
25Monitor | CVE-1999-0183No exploit | Linux implementations of TFTP would allow access to files outside the restricted directory.tftp · tftp | Medium6.4 | — | 1.5% | Sep 1, 1997 |
21Monitor | CVE-2002-2237No exploit | tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as cotftp · tftp server · CWE-20 | Medium5.0 | — | 1.7% | Dec 31, 2002 |
- CVE-2008-216160This week
Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execute arbitrary code via
CriticalCVSS 10.0WeaponizedEPSS 65%tftp · tftp server spMay 12, 2008
- CVE-2004-148531Monitor
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response
HighCVSS 7.5No exploitEPSS 2%tftp · tftpDec 31, 2004
- CVE-1999-018325Monitor
Linux implementations of TFTP would allow access to files outside the restricted directory.
MediumCVSS 6.4No exploitEPSS 1%tftp · tftpSep 1, 1997
- CVE-2002-223721Monitor
tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as co
MediumCVSS 5.0No exploitEPSS 1%tftp · tftp serverDec 31, 2002