CVE-2007-3268

Related Files

iDEFENSE Security Advisory 2007-07-17.1

Posted Jul 18, 2007

Authored by iDefense Labs, Manuel Santamarina Suarez | Site idefense.com

iDefense Security Advisory 07.17.07 - Remote exploitation of a denial of service vulnerability within version 5.1.0.2 of IBM Corp.'s Tivoli Provisioning Manager for OS Deployment allows attackers to deny service to all product functionality. This vulnerability specifically exists in the TFTP protocol implementation. When processing a read request (RRQ), an integer division by zero error can be triggered by supplying an invalid "blksize" argument. This exception is not handled and will result in the rembo.exe service terminating. iDefense has confirmed the existence of this vulnerability in version 5.1.0.2 of IBM Corp.'s Tivoli Provisioning Manager for OS Deployment. Version 5.1.0.116 was tested and found not to be vulnerable.

tags | advisory, remote, denial of service, protocol

advisories | CVE-2007-3268

SHA-256 | 40106158ae64ead59633c78c6baab0148d5d02413668e8e71ea6cd3d961f725a

Download | Favorite | View