Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.

The remote TFTP server dies when it receives a too big UDP datagram.
An attacker may use this flaw to disable the server, or even execute arbitrary code on the system.

Trivial File Transfer Protocol (TFTP) is a protocol that allows for easy transfer of files between network connected devices. A vulnerability has been discovered in the processing of filenames within a TFTP read request when Cisco IOS is configured to act as a TFTP server. This vulnerability is documented as Cisco Bug ID CSCdy03429

 Trivial File Transfer Protocol (TFTP) is a protocol that allows for easy transfer of files between network connected devices. A vulnerability has been discovered in the processing of filenames within a TFTP read request when Cisco IOS is configured to act as a TFTP server. This vulnerability is documented as Cisco Bug ID CSCdy03429.

Trivial File Transfer Protocol (TFTP) is a protocol which allows for easy transfer of files between network connected devices. 

A vulnerability has been discovered in the processing of filenames within a TFTP read request when Cisco IOS is configured to act as a TFTP server.

This vulnerability is documented as Cisco Bug ID CSCdy03429.

ID	Name	Product	Family	Severity
18264	TFTPD Server Filename Handling Remote Overflow	Nessus	Gain a shell remotely	high
2245	Cisco TFTP Server Long Filename DoS (Bug ID CSCdy03429)	Nessus Network Monitor	SNMP	medium
2244	Cisco TFTP Server Long Filename DoS (Bug ID CSCdy03429)	Nessus Network Monitor	SNMP	medium
2243	Cisco TFTP Server Long Filename DoS (Bug ID CSCdy03429)	Nessus Network Monitor	SNMP	medium
11056	Cisco TFTP Server Long Filename DoS (CSCdy03429)	Nessus	CISCO	high

Detections

Analytics

CVE-2002-0813

critical

Tenable Plugins

high

medium

medium

medium

high