CVE-2002-2396: Remi Lefebvre Advanced Tftp

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.

Affected products

• Remi Lefebvre Advanced Tftp: version 0.5 only; version 0.6 only

Published 2002-12-31. Last modified 2026-06-16.