Lucene search
MitreCVE-2013-1461HistoryJan 31, 2013 - 9:55 p.m.
CVE-2013-1461
2013-01-3121:55:01
mitre
web.nvd.nist.gov
33
miniupnpd
soapaction
http service
denial of service
cve-2013-1461
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
Low
EPSS
0.859
Percentile
98.6%
The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and service crash) via a SOAPAction header that lacks a # (pound sign) character, a different vulnerability than CVE-2013-0230.
Affected configurations
Node
miniupnp_projectminiupnpdMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| miniupnp_project | miniupnpd | 1.0 | cpe:/a:miniupnp_project:miniupnpd:1.0::: |
Related
prion
prion
Null pointer dereference
2013-01-31 21:55:00
Stack overflow
2013-01-31 21:55:00
Integer overflow
2013-01-31 21:55:00
nvd
nvd
ubuntucve
ubuntucve
cvelist
cvelist
debiancve
debiancve
openvas
openvas
MiniUPnP < 1.4 Multiple DoS Vulnerabilities
2013-02-06 00:00:00
MiniUPnP Multiple Denial of Service Vulnerabilities (TCP)
2013-02-06 00:00:00
checkpoint_advisories
checkpoint_advisories
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution (CVE-2013-0230)
2013-06-24 00:00:00
packetstorm
packetstorm
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution
2013-06-05 00:00:00
MiniUPnPd 1.0 Stack Overflow
2015-04-27 00:00:00
MiniUPNPd 1.0 Remote Denial Of Service
2015-07-08 00:00:00
exploitpack
exploitpack
MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series
2015-04-27 00:00:00
INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service
2015-07-07 00:00:00
metasploit
metasploit
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution
2013-06-04 13:53:18
UPnP SSDP M-SEARCH Information Discovery
2010-11-09 06:24:32
zdt
zdt
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution
2013-06-05 00:00:00
INFOMARK IMW-C920W miniupnpd 1.0 - Denial of Service Vulnerability
2015-07-08 00:00:00
cve
cve
CVE-2013-0230
2013-01-31 21:55:01
CVE-2013-1462
2013-01-31 21:55:01
exploitdb
exploitdb
MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series
2015-04-27 00:00:00
INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service
2015-07-07 00:00:00
nessus
nessus
MiniUPnP < 1.4 Multiple Vulnerabilities
2013-01-31 00:00:00
thn
thn
Security Flaws in UPnP protocol put 50 million devices at risk
2013-01-29 06:04:00
Security Flaws in UPnP protocol put 50 million devices at risk
2013-01-29 17:04:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
Low
EPSS
0.859
Percentile
98.6%
Related for CVE-2013-1461