SolarWinds TFTP Server 'Read' Request (Opcode 0x01) Denial Of Service Vulnerability

Bugtraq ID:	40333
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 21 2010 12:00AM
Updated:	May 25 2010 01:12PM
Credit:	Nullthreat
Vulnerable:	SolarWinds TFTP Server 10.4 .10 SolarWinds TFTP Server 9.2.0.111 SolarWinds TFTP Server 8.2 SolarWinds TFTP Server 8.1 SolarWinds Engineer�??s Toolset 10.6 84
Not Vulnerable:

SolarWinds TFTP Server 'Read' Request (Opcode 0x01) Denial Of Service Vulnerability

SolarWinds TFTP Server is prone to a denial-of-service vulnerability.

A successful exploit can allow attackers to crash the server process, resulting in a denial-of-service condition.

SolarWinds TFTP Server 10.4.0.10 is vulnerable; other versions may also be affected.

SolarWinds TFTP Server 'Read' Request (Opcode 0x01) Denial Of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/40333.pl

SolarWinds TFTP Server 'Read' Request (Opcode 0x01) Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SolarWinds TFTP Server 'Read' Request (Opcode 0x01) Denial Of Service Vulnerability

References:

• TFTP Server Homepage (SolarWinds)