Bug 25753 - CVE-2011-2199: buffer overflow in tftp-hpa
: CVE-2011-2199: buffer overflow in tftp-hpa
Status: CLOSED FIXED
: Sisyphus
(All bugs in Sisyphus/tftpd)
: unstable
: all Linux
: P3 critical
Assigned To:
:
: http://openwall.com/lists/oss-securit...
: security
:
:
  Show dependency tree
 
Reported: 2011-06-13 20:59 by
Modified: 2011-06-18 01:11 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2011-06-13 20:59:38
"The tftp-hpa daemon contained a buffer overflow vulnerability in the
function for setting the utimeout option. As the daemon accepts this
option from clients, the buffer overflow can be remotely exploited."
------- Comment #1 From 2011-06-14 01:23:07 -------
Here is the gitweb URL for that patch:
http://git.kernel.org/?p=network/tftp/tftp-hpa.git;a=commitdiff;h=f3035c45bc50bb5cac87ca01e7ef6a12485184f8
------- Comment #2 From 2011-06-18 01:11:20 -------
tftp - The client for the Trivial File Transfer Protocol (TFTP)
* Tue Jun 14 2011 Damir Shayhutdinov <damir@altlinux> 5.0-alt3
- Fix buffer overflow in utimeout option (CVE 2011-2199, closes #25753)