Secunia

A vulnerability has been identified in atftp allowing malicious TFTP servers to cause a buffer overflow in atftp clients.

The problem is that atftp doesn't handle filenames longer than 253 characters correctly. This allows malicious TFTP servers to cause a buffer overflow which possibly could be exploited to execute arbitrary code.

An exploit is in the wild.

NOTE: The TFTP protocol is based on UDP making injection of arbitrary packets into the datastream and Man-in-the-Middle attacks trivial.

Solution
Use a different TFTP client.

Provided and/or discovered by
Discovered by Rick Patel
Further research by gz

Deep Links
Links available in Customer Area