Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - tftp: buffer overflow when setting utimeout option (CVE-2011-2199)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - tftp: buffer overflow when setting utimeout option (CVE-2011-2199)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - tftp: buffer overflow when setting utimeout option (CVE-2011-2199)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - tftp: buffer overflow when setting utimeout option (CVE-2011-2199)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option (CVE-2011-2199).

The remote host is affected by the vulnerability described in GLSA-201206-12 (tftp-hpa: Remote buffer overflow)

    A vulnerability has been discovered in tftp-hpa. Please review the CVE       identifier referenced below for details.
  Impact :

    The vulnerability might allow remote attackers to execute arbitrary       code.
  Workaround :

    There is no known workaround at this time.

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option. (CVE-2011-2199)

ID	Name	Product	Family	Severity
199661	RHEL 3 : tftp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199618	RHEL 6 : tftp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199572	RHEL 5 : tftp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
199563	RHEL 4 : tftp (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
76033	openSUSE Security Update : tftp (openSUSE-SU-2011:0734-1)	Nessus	SuSE Local Security Checks	high
75756	openSUSE Security Update : tftp (openSUSE-SU-2011:0734-1)	Nessus	SuSE Local Security Checks	high
59650	GLSA-201206-12 : tftp-hpa: Remote buffer overflow	Nessus	Gentoo Local Security Checks	high
57254	SuSE 10 Security Update : tftp (ZYPP Patch Number 7590)	Nessus	SuSE Local Security Checks	high
55505	SuSE 10 Security Update : tftp (ZYPP Patch Number 7589)	Nessus	SuSE Local Security Checks	high
55503	SuSE 11.1 Security Update : tftp (SAT Patch Number 4786)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2011-2199

critical

Tenable Plugins

critical

critical

critical

critical

high

high

high

high

high

high