CVE-2002-2396

Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:remi_lefebvre:advanced_tftp:0.5:*:*:*:*:*:*:*
cpe:2.3:a:remi_lefebvre:advanced_tftp:0.6:*:*:*:*:*:*:*

History

20 Nov 2024, 23:43

Type Values Removed Values Added
References () http://www.iss.net/security_center/static/10142.php - () http://www.iss.net/security_center/static/10142.php -
References () http://www.netric.org/advisories/netric-adv010.txt - () http://www.netric.org/advisories/netric-adv010.txt -
References () http://www.securityfocus.com/bid/5760 - () http://www.securityfocus.com/bid/5760 -

Information

Published : 2002-12-31 05:00

Updated : 2024-11-20 23:43


NVD link : CVE-2002-2396

Mitre link : CVE-2002-2396

CVE.ORG link : CVE-2002-2396


JSON object : View

Products Affected

remi_lefebvre

  • advanced_tftp
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer