[2/5] PacketTrap pt360 TFTP Filename Handling Denial of Service
:Luigi Auriemma has reported a vulnerability in PacketTrap pt360 TFTP server, which can be exploited by malicious people to cause a DoS (Denial of Service).The vulnerability is caused due to an error when handling certain invalid filenames. This can be exploited to prevent the TFTP server from responding by sending specially crafted requests to the service.The vulnerability is reported in version 2.0.3901.0. Other versions may also be affected.Solution:Use a firewall to allow only trusted hosts access to the service.Provided and/or discovered by:Luigi AuriemmaOriginal Advisory:http://aluigi.altervista.org/adv/packettrash-adv.txt
Original post by Pankaj
Posted in Advisories - Exploits |
| [2/5] PacketTrap pt360 TFTP Filename Handling Denial of Service