Lucene search

[email protected]CVE-2006-3687

HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3687

2006-07-2114:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-3687

universal plug and play

upnp

buffer overflow

d-link

di-524

di-604

di-624

di-784

wbr-1310

wbr-2310

ebr-2310

remote code execution

network security

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.361 Low

EPSS

Percentile

97.2%

JSON

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.

CPENameOperatorVersion
d-link:wbr-1310_wireless_g_routerd-link wbr-1310 wireless g routereq*
d-link:di-604_broadband_routerd-link di-604 broadband routereq*
d-link:di-784d-link di-784eq*
d-link:ebr-2310_ethernet_broadband_routerd-link ebr-2310 ethernet broadband routereq*
d-link:wbr-2310_rangebooster_g_routerd-link wbr-2310 rangebooster g routereq*
dlink:di-524dlink di-524eq*
dlink:di-624dlink di-624eq*

CPE	Name	Operator	Version
d-link:wbr-1310_wireless_g_router	d-link wbr-1310 wireless g router	eq	*
d-link:di-604_broadband_router	d-link di-604 broadband router	eq	*
d-link:di-784	d-link di-784	eq	*
d-link:ebr-2310_ethernet_broadband_router	d-link ebr-2310 ethernet broadband router	eq	*
d-link:wbr-2310_rangebooster_g_router	d-link wbr-2310 rangebooster g router	eq	*
dlink:di-524	dlink di-524	eq	*
dlink:di-624	dlink di-624	eq	*

References

archives.neohapsis.com/archives/fulldisclosure/2006-07/0363.html

secunia.com/advisories/21081

securitytracker.com/id?1016511

www.eeye.com/html/research/advisories/AD20060714.html

www.kb.cert.org/vuls/id/971705

www.osvdb.org/27333

www.securityfocus.com/archive/1/440298/100/0/threaded

www.securityfocus.com/archive/1/440852/100/100/threaded

www.securityfocus.com/bid/19006

www.vupen.com/english/advisories/2006/2829

exchange.xforce.ibmcloud.com/vulnerabilities/27755

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.361 Low

EPSS

Percentile

97.2%

JSON

Related for CVE-2006-3687

cvelist1 cert1