Two vulnerabilities have been reported in SolarWinds TFTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error in the processing of "Read Request" requests can be exploited to halt the service via a specially crafted "Read Request" sent to UDP port 69.

The vulnerability is confirmed in version 10.4.0.10. Other versions may also be affected.

2) An error when processing TFTP write requests can be exploited to crash the server via a specially crafted request sent to UDP port 69.

The vulnerability is reported in version 10.4.0.13. Prior versions may also be affected.

Solution
Update to version 10.4.0.14.

Provided and/or discovered by
Nullthreat

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.exploit-db.com/exploits/12683
http://www.exploit-db.com/exploits/13836

Deep Links
Links available to Secunia VIM customers