CVE-2006-6184: Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, al...

Security readout for executives and security teams

This is an old remote memory-safety flaw in Allied Telesyn AT-TFTP Server 1.9 and possibly earlier. A long filename in a TFTP GET or PUT request can crash the service or potentially allow arbitrary code execution. Business urgency depends on whether this legacy TFTP server is still reachable. Exposure is likely limited to legacy environments still running Allied Telesyn AT-TFTP Server 1.9 or possibly earlier, especially where TFTP is reachable from untrusted networks or broad internal segments. Prioritize remediation if AT-TFTP is still operational, exposed, or supporting network boot or device-management workflows. If absent from the environment, record as not applicable after inventory validation. Mitigation focus: Identify and retire AT-TFTP Server 1.9 or earlier where possible.; Restrict TFTP access to trusted management hosts only.; Block internet exposure for any TFTP service..

Prepared

Jun 29, 2026, 09:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.