CVE-2006-6184

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1400%

EPSS Percentile28.23th

Published2006年12月1日

Last Modified2026年4月23日

Vulnerability Description

Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command.

Affected Platforms (CPE)

📦

Alliedtelesyn

At Tftp

<= 1.9

References & Advisories

🔗 http://secunia.com/advisories/23106

🔗 http://securityreason.com/securityalert/1929

🔗 http://securityreason.com/securityalert/8120

🔗 http://www.exploit-db.com/exploits/16350

🔗 http://www.exploit-db.com/exploits/24952

🔗 http://www.osvdb.org/11350

🔗 http://www.securityfocus.com/archive/1/452743/100/0/threaded

🔗 http://www.securityfocus.com/bid/21320

Vulnerability Description

Affected Platforms (CPE)

At Tftp

References & Advisories

相關漏洞威脅