← Vulnerability feed

Vulnerability record · CVE-2006-0328 · published 21 January 2006

CVE-2006-0328: Philippe jounin tftpd32 vulnerability

PPhilippe Jounin · Tftpd32

Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.

5.0 CVSS 2.0 Medium EPSS 7.6% · top 5.7%
5.0CVSS 2.0 base score
7.6%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/18539 Vendor Advisory
http://securityreason.com/securityalert/362
http://www.critical.lt/?vulnerabilities/200 ExploitVendor Advisory
http://www.critical.lt/research/tftpd32_281_dos.txt Exploit
http://www.kb.cert.org/vuls/id/632633 US Government Resource
http://www.osvdb.org/22661
http://www.securityfocus.com/archive/1/422405/100/0/threaded
http://www.securityfocus.com/bid/16333
http://www.vupen.com/english/advisories/2006/0263
https://exchange.xforce.ibmcloud.com/vulnerabilities/24250
http://secunia.com/advisories/18539 Vendor Advisory
http://securityreason.com/securityalert/362
http://www.critical.lt/?vulnerabilities/200 ExploitVendor Advisory
http://www.critical.lt/research/tftpd32_281_dos.txt Exploit
http://www.kb.cert.org/vuls/id/632633 US Government Resource
http://www.osvdb.org/22661
http://www.securityfocus.com/archive/1/422405/100/0/threaded
http://www.securityfocus.com/bid/16333
http://www.vupen.com/english/advisories/2006/0263
https://exchange.xforce.ibmcloud.com/vulnerabilities/24250

Track CVE-2006-0328 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.0CVE-2013-6809Philippe jounin tftpd32 vulnerabilityFormat string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbit…EPSS 2.9%5.0CVE-2005-4882Philippe jounin tftpd32 memory buffer overflow vulnerabilitytftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial …EPSS 1.8%5.0CVE-2006-6141Philippe jounin tftpd32 vulnerabilityBuffer overflow in Tftpd32 3.01 allows remote attackers to cause a denial of service via a long GET or PUT request, which is not properly handled whe…EPSS 3.8%4.3CVE-2005-4883Philippe jounin tftpd32 race condition vulnerabilityRace condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid "connect frames…EPSS 0.75%

Source: NIST National Vulnerability Database (record CVE-2006-0328), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.