CVE-2004-1485

CVE-2004-1485 describes a buffer overflow vulnerability in the TFTP client component of GNU InetUtils 1.4.2. This flaw allows a remote, malicious DNS server to execute arbitrary code on affected systems by sending an oversized DNS response that triggers the overflow within the gethostbyname function. With a CVSS score of 7.5, this vulnerability is considered highly severe, enabling potential compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion with over 10 mentions, indicating awareness and potential for future exploitation.