TFTP Vulnerability Exploiting Technique Based on Fuzzing
Yuqing Zhang · Jisuanji gongcheng · 2007
Fuzzing is an automated vulnerability exploiting technique.This paper propose a vulnerability exploiting approach based on Fuzzing and applies the approach to TFTP protocol.A fuzzer named tftpServerFuzzer is designed and implemented to test TFTP servers.11 types of TFTP servers based on Windows via Internet are collected.By testing those TFTP servers using tftpServerFuzzer,seven unreleased and six known vulnerabilities are discovered.The result indicates the validity and superiority of the tftpServerFuzzer.