Secunia

Some vulnerabilities have been discovered in TFTPUtil, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) A NULL-pointer dereference error in the processing of TFTP GET requests can be exploited to crash an affected server via an overly large TFTP GET request.

2) An error within the processing of certain TFTP requests can be exploited to cause a crash due to an out of bounds array access by e.g. sending a specially crafted TFTP GET command to the server.

The vulnerabilities are confirmed in version 1.4.5. Other versions may also be affected.

Solution
Restrict network access to trusted users only.

Provided and/or discovered by
1) ThE g0bL!N
2) Vuk Ivanovic

Changelog
Further details available in Customer Area

Original Advisory
1) http://www.exploit-db.com/exploits/9528/
2) http://www.exploit-db.com/exploits/15674/

Deep Links
Links available in Customer Area