CVE-2006-0328: Philippe Jounin TFTPD32

Medium severity, CVSS 5.0. EPSS: 7.6% chance of exploitation in the next 30 days.

Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request.

Affected products

• Philippe Jounin TFTPD32: version 2.81 only

Published 2006-01-21. Last modified 2026-06-16.