Philippe Jounin Tftpd32 Connect Frame Denial Of Service Vulnerability

Bugtraq ID:	37122
Class:	Race Condition Error
CVE:	CVE-2005-4883
Remote:	Yes
Local:	No
Published:	Jan 18 2005 12:00AM
Updated:	Nov 24 2009 08:55PM
Credit:	Reported by the vendor
Vulnerable:	Philippe Jounin TFTPD32 2.74 Philippe Jounin TFTPD32 2.73 Philippe Jounin TFTPD32 2.72 Philippe Jounin TFTPD32 2.71 Philippe Jounin TFTPD32 2.70
Not Vulnerable:	Philippe Jounin TFTPD32 2.80

Philippe Jounin Tftpd32 Connect Frame Denial Of Service Vulnerability

Philippe Jounin Tftpd32 is prone to a denial-of-service vulnerability caused by a race condition.

A successful exploit may allow attackers to crash the server process, resulting in a denial-of-service condition.

Versions prior to Philippe Jounin Tftpd32 2.80 are vulnerable.

Philippe Jounin Tftpd32 Connect Frame Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Philippe Jounin Tftpd32 Connect Frame Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.


Philippe Jounin TFTPD32 2.74

• Philippe Jounin tftpd32.280.zip
  http://tftpd32.jounin.net/download/tftpd32.280.zip

Philippe Jounin Tftpd32 Connect Frame Denial Of Service Vulnerability

References:

• TFTPD32 Homepage (Philippe Jounin)
  
• TFTPD32 Release Notes (Philippe Jounin)