10
CVSSv2

CVE-2006-6183

Published: 01/12/2006 Updated: 17/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote malicious users to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command.

Vulnerable Product Search on Vulmon Subscribe to Product

3com 3ctftpsvc

Exploits

#!/usr/bin/perl -w # =============================================================================================== # 3Com TFTP Service <= 201 (Long Transporting Mode) Overflow Perl Exploit # By Umesh Wanve (umesh_345@yahoocom) # ==================================================================== ...
## # $Id: threectftpsvc_long_moderb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...
#!/usr/bin/python # Buffer Overflow (Long transporting mode) Vulnerability Exploit # This is just a DoS exploiting code # Tested on Windows xp SP2 # # Requires python and impacket # # Coded by Liu Qixu Of NCNIPC # SUMMARY: # 3CTftpSvc TFTP Server is a Freeware TFTP server for Windows 9x/NT/XP # (support3comcom/software/utilities_for_win ...
package Msf::Exploit::3com_tftp_long_mode; use strict; use base "Msf::Exploit"; use Pex::Text; use IO::Socket; my $advanced = { }; my $info = { 'Name' => 'TFTP Server 3CTftpSvc Buffer Overflow Vulnerability', 'Version' => '$ 10 $', 'Authors' => ['Enseirb <vincenty [at] enseirbfr>', ], 'Descript ...
# 3comtftpd_xpsp2rb # # Copyright (C) cthulhu # # # This is a poc intended to exploit the 3Com TFTP Service version 201 # long transporting mode buffer overflow under xp sp2 english # (Vulnerability discovered by Liu Qixu) # # Usage : # ruby 3comftpd_xpsp2rb <victimhost> <victimport> # Default port is 69 if not specified requi ...