Tftpd32 Error Message Format String

This script is Copyright (C) 2006-2014 Tenable Network Security, Inc.

Synopsis :

The remote tftp server is affected by a format string vulnerability.

Description :

The remote host appears to be running Tftpd32, a tftpd server for

There is a format string vulnerability in versions of Tftpd32 up to
and including 2.81 that may allow remote attackers to crash the server
or to execute code on the affected host subject to the privileges
under which the server operates, possibly SYSTEM since the application
can be configured to run as a service.

See also :

Solution :

Unknown at this time.

Risk factor :

Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.5
Public Exploit Available : true

Family: Gain a shell remotely

Nessus Plugin ID: 20755 ()

Bugtraq ID: 16333

CVE ID: CVE-2006-0328

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now