← back
CVE-2009-2957

CVE-2009-2957

EPSS 12.7%
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/9617unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.redhat.com/show_bug.cgi?id=519020http://secunia.com/advisories/36563https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10538https://rhn.redhat.com/errata/RHSA-2010-0095.htmlhttp://www.coresecurity.com/content/dnsmasq-vulnerabilitieshttp://www.redhat.com/support/errata/RHSA-2009-1238.htmlhttp://www.securityfocus.com/bid/36121http://www.thekelleys.org.uk/dnsmasq/CHANGELOGhttp://www.ubuntu.com/usn/USN-827-1