Signature Detail
Short Name |
TFTP:WVFTP-OPTION-OF |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
TFTP |
Keywords |
wvftp |
Release Date |
2004/10/27 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TFTP: WVtftp Option Value Heap Overflow
This signature detects attempts to exploit a known vulnerability against the WVtftp daemon. Attackers can submit a maliciously crafted "file get" request to the server to execute arbitrary code as the administrative user on the target host.
Extended Description
An attacker can exploit the vulnerability to cause a denial of service or execute arbitrary code on the vulnerable target with the privileges of the user running the WvTftp service.
References