Login Request a demo
Unscored severity · published Mar 31, 2003
CVE-2002-1542
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow
–
CVSS
13.2%
EPSS
No
On KEV
Description
SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tftp Server · Solarwinds
5.0.55_standard · source: NVD
Affected product
TS
Tftp Server
Solarwinds
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1542
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1542
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-10/0344.html
Exploit
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0040.html
www.iss.net
http://www.iss.net/security_center/static/10462.php
Exploit
http://www.securityfocus.com/bid/6043
More from Tftp Server
–
CVE-2010-2310
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request
–
CVE-2010-2115
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request
–
CVE-2009-3115
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request
–
CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//"…
–
CVE-2002-1209
Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences…