First published: Wed Sep 09 2009(Updated: )
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SolarWinds TFTP Server | =5.0.60 | |
SolarWinds TFTP Server | =8.1 | |
SolarWinds TFTP Server | =8.2 | |
SolarWinds TFTP Server | <=9.2.0.111 | |
SolarWinds TFTP Server | =5.0.55 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-3115 is classified as a denial of service vulnerability.
To fix CVE-2009-3115, upgrade to a version of SolarWinds TFTP Server that is later than 9.2.0.111.
CVE-2009-3115 affects all versions of SolarWinds TFTP Server up to and including 9.2.0.111.
Yes, CVE-2009-3115 can be exploited by remote attackers via a specially crafted Option Acknowledgement request.
Exploitation of CVE-2009-3115 can lead to a denial of service, causing the SolarWinds TFTP Server to stop functioning.