PacketTrap pt360 Tool Suite TFTP Server Remote Denial of Service Vulnerability

Bugtraq ID:	28079
Class:	Input Validation Error
CVE:	CVE-2008-1312
Remote:	Yes
Local:	No
Published:	Mar 03 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	princeofnigeria and r@b13$ are credited with discovering this vulnerability.
Vulnerable:	PacketTrap Networks pt360 Tool Suite TFTP Server 1.1.33.1
Not Vulnerable:

PacketTrap pt360 Tool Suite TFTP Server Remote Denial of Service Vulnerability

PacketTrap pt360 Tool Suite TFTP server is prone to a remote denial-of-service vulnerability because it fails to handle user-supplied input.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

PacketTrap pt360 Tool Suite TFTP server 1.1.33.1 is affected; other versions may also be vulnerable.

PacketTrap pt360 Tool Suite TFTP Server Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PacketTrap pt360 Tool Suite TFTP Server Remote Denial of Service Vulnerability

Solution:
The vendor has released patch # 3302 to address this issue. Please contact the vendor for information on obtaining and applying the patch.

PacketTrap pt360 Tool Suite TFTP Server Remote Denial of Service Vulnerability

References:

• PacketTrap Networks Homepage (PacketTrap Networks)
  
• DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability ([email protected])