CVE-2009-3115

Опубликовано: 09 сент. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information.

Ссылки

http://secunia.com/advisories/36505
Vendor Advisory
http://www.exploit-db.com/exploits/9547
http://www.securityfocus.com/bid/36182
Exploit
http://secunia.com/advisories/36505
Vendor Advisory
http://www.exploit-db.com/exploits/9547
http://www.securityfocus.com/bid/36182
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:solarwinds:tftp_server:*:*:*:*:*:*:*:*

Версия до 9.2.0.111 (включая)

cpe:2.3:a:solarwinds:tftp_server:5.0.55:*:standard:*:*:*:*:*

cpe:2.3:a:solarwinds:tftp_server:5.0.60:*:standard:*:*:*:*:*

cpe:2.3:a:solarwinds:tftp_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:solarwinds:tftp_server:8.2:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05637

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-2hgf-g4v8-3jqv

github

почти 4 года назад