← Database

CVE-2004-1636

CRITICAL CVSS: 10.0 Published: 2004-10-26 Modified: 2026-06-16

Description

Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.

Affected Platforms

Net Integration Technologies Inc. Wvtftp

Weakness Type

NVD-CWE-Other

References