Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly     execute arbitrary code via the utimeout option. (CVE-2011-2199)

Note that Nessus relies on the presence of the package as reported by the vendor.

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option (CVE-2011-2199).

The remote host is affected by the vulnerability described in GLSA-201206-12 (tftp-hpa: Remote buffer overflow)

    A vulnerability has been discovered in tftp-hpa. Please review the CVE       identifier referenced below for details.
  Impact :

    The vulnerability might allow remote attackers to execute arbitrary       code.
  Workaround :

    There is no known workaround at this time.

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option. (CVE-2011-2199)

ID	Name	Product	Family	Severity
217482	Linux Distros Unpatched Vulnerability : CVE-2011-2199	Nessus	Misc.	critical
76033	openSUSE Security Update : tftp (openSUSE-SU-2011:0734-1)	Nessus	SuSE Local Security Checks	high
75756	openSUSE Security Update : tftp (openSUSE-SU-2011:0734-1)	Nessus	SuSE Local Security Checks	high
59650	GLSA-201206-12 : tftp-hpa: Remote buffer overflow	Nessus	Gentoo Local Security Checks	high
57254	SuSE 10 Security Update : tftp (ZYPP Patch Number 7590)	Nessus	SuSE Local Security Checks	high
55505	SuSE 10 Security Update : tftp (ZYPP Patch Number 7589)	Nessus	SuSE Local Security Checks	high
55503	SuSE 11.1 Security Update : tftp (SAT Patch Number 4786)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2011-2199

critical

Tenable Plugins

critical

high

high

high

high

high

high