:tixxDZ has discovered a vulnerability in TFTP Server SP, which can be exploited by malicious people to cause a DoS or compromise a vulnerable system.The vulnerability is caused due to a boundary error in the handling of error messages and can be exploited to cause a BSS-based or stack-based buffer overflow via an error packet with an overly long error message.Successful exploitation allows execution of arbitrary code.The vulnerability is confirmed in the Windows version of TFTP Server SP version 1.4 and 1.5. Other versions may also be affected.Solution:Restrict network access to the TFTP service.Provided and/or discovered by:tixxDZOriginal Advisory:http://milw0rm.com/exploits/5563

Original post by pooja