CVE-2008-1311

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

49.17% chance of exploitation in the next 30 days, 99th percentile

Published

2008-03-12

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/tftp/pt360_write.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/6863

References

• CVE Record
• NVD entry

Related

• CVE-2008-1309
• CVE-2008-1313
• CVE-2008-1308
• CVE-2008-1314
• CVE-2008-1307
• CVE-2008-1315