CVE-2002-2396

Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Advanced Tftp (Remi Lefebvre)

References

• http://www.iss.net/security_center/static/10142.php
• http://www.netric.org/advisories/netric-adv010.txt
• http://www.securityfocus.com/bid/5760