RedTeam Discovers 0-day in TFTPGUI

RedTeam Discovers 0-day in TFTPGUI 1.4.5
Jeremiah Talamantes, Principal Security Consultant and Security Researcher at RedTeam, has discovered a 0-day security vulnerability in TFTPGUI version 1.4.5. The security vulnerability in the TFTP server application revolves around unexpected behavior when sending an overly long transport mode string. An attacker can execute a remote Denial-of-Service attack on the server application by sending a string of malicious characters causing the program to crash.
Jeremiah has developed proof of concept code for this vulnerability in Python. This 0-day has been published by the Exploit Database, Security Reason and Packet Storm Security among others.
Our Published Advisory
* Packet Storm Security
* Exploit Database: EDB-ID 12482
* Security Reason: WLB-2010050009
Categories
Contact Us
Phone number:
1-612-234-7848
E-mail:
