CVE-2007-1435: d-link tftp_server
Vulnerability summary
CVE-2007-1435 is a high (CVSS 10.0) vulnerability in d-link tftp_server. EPSS estimates a 45.80% chance of exploitation in the next 30 days, higher than 98.7% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 13-03-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request, which triggers memory corruption. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
45.80%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+2.98 pp
From 42.82% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundD-Link TFTP 1.0 - Transporting Mode Remote Buffer Overflow
Maturity: weaponized
D-Link TFTP 1.0 - 'Filename' Remote Buffer Overflow (Metasploit)
Maturity: weaponized
D-Link TFTP 1.0 Long Filename Buffer Overflow
exploit/windows/tftp/dlink_long_filename
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
D-link1 product
- tftp_server1.0
1 vendor · 1 product