CVE-2008-1403

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-03-20 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and earlier allows remote attackers to execute arbitrary code via a request with a long filename.

Affected products

Bootmanage Administrator: through windows
Bootmanage Tftpd: through windows

References

http://aluigi.altervista.org/adv/bootixtftpd-adv.txt
http://secunia.com/advisories/29404
http://www.securityfocus.com/archive/1/489705/100/0/threaded
http://www.securityfocus.com/bid/28270
https://exchange.xforce.ibmcloud.com/vulnerabilities/41226
http://aluigi.altervista.org/adv/bootixtftpd-adv.txt
http://secunia.com/advisories/29404
http://www.securityfocus.com/archive/1/489705/100/0/threaded
http://www.securityfocus.com/bid/28270
https://exchange.xforce.ibmcloud.com/vulnerabilities/41226

Get alerted when CVE-2008-1403 or the next vulnerability affects your stack