Threats tagged 'ghsa-2j25-rfrh-cphw'

A critical stack-based buffer overflow vulnerability exists in the TFTP Upload Filename Handler component of D-Link DIR-505 version 1.10B02. The flaw is in the save_upload_file/mp_upload_file function of /usr/bin/tftpd and can be exploited remotely without authentication. Public exploit code is available, increasing the risk of exploitation.