Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary…

Published 18 y ago 2008-04-01 · modified 4 mo ago 2026-06-16 · JSON

CVSS

7.5

v2.0 · NVD

CISA KEV

not known exploited

EPSS

53.9%

percentile 99%

Public exploits

Metasploit · Exploit-DB

Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request.

Exploit prediction (EPSS)

53.91% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

Metasploit exploit/windows/tftp/quick_tftp_pro_mode Quick FTP Pro 2.1 Transfer-Mode Overflow · metasploit exploit, good rank · 2008-03-27
EDB-5315 Quick TFTP Server Pro 2.1 - Remote Overflow (SEH) · remote · 2008-03-26
EDB-26010 Quick TFTP Server Pro 2.2 - Denial of Service · dos · 2013-06-07
EDB-16348 Quick TFTP Server Pro 2.1 - Transfer-Mode Overflow (Metasploit) · remote · 2010-06-15

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

exchange.xforce.ibmcloud.com /vulnerabilities/41499 · vdb-entry, x_refsource_XF, x_transferred
exploit-db.com /exploits/5315 · exploit, x_refsource_EXPLOIT-DB, x_transferred
offensive-security.com /0day/quick-tftp-poc.py.txt · x_refsource_MISC, x_transferred
securityfocus.com /bid/28459 · vdb-entry, x_refsource_BID, x_transferred
secunia.com /advisories/29494 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

CVE List: CVE-2008-1610
NVD: CVE-2008-1610

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.