CVE-2004-1485: Buffer Overflow
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
Affected Software
Event History
Frequently Asked Questions
What is the nature of the vulnerability CVE-2004-1485?
CVE-2004-1485 describes a buffer overflow in the TFTP client in InetUtils 1.4.2 that can be exploited by malicious DNS servers to execute arbitrary code.
Which versions of software are affected by CVE-2004-1485?
CVE-2004-1485 affects TFTP versions 0.29, 0.32, 0.34, 0.36, and 0.38, as well as GNU InetUtils version 1.4.2.
What are the potential consequences of exploiting CVE-2004-1485?
Exploitation of CVE-2004-1485 can lead to remote execution of arbitrary code, potentially allowing attackers to take control of the affected system.
How can organizations mitigate the risks associated with CVE-2004-1485?
Organizations can mitigate risks from CVE-2004-1485 by upgrading to a version of TFTP or GNU InetUtils that is not vulnerable and disabling TFTP services if not needed.
What is the recommended action to fix CVE-2004-1485?
The recommended action to resolve CVE-2004-1485 is to update the vulnerable software to a patched version that addresses this buffer overflow issue.