Lucene search
HistoryJan 31, 2013 - 9:55 p.m.
CVE-2013-1462
cve-2013-1462
soapaction handler
miniupnpd
integer signedness error
denial of service
remote attackers
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
Low
EPSS
0.859
Percentile
98.6%
Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (incorrect memory copy) via a SOAPAction header that lacks a " (double quote) character, a different vulnerability than CVE-2013-0230.
Affected configurations
Node
miniupnp_projectminiupnpdMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| miniupnp_project | miniupnpd | 1.0 | cpe:/a:miniupnp_project:miniupnpd:1.0::: |
Related
nvd
nvd
prion
prion
Integer overflow
2013-01-31 21:55:00
Stack overflow
2013-01-31 21:55:00
Null pointer dereference
2013-01-31 21:55:00
cvelist
cvelist
ubuntucve
ubuntucve
debiancve
debiancve
openvas
openvas
MiniUPnP < 1.4 Multiple DoS Vulnerabilities
2013-02-06 00:00:00
MiniUPnP Multiple Denial of Service Vulnerabilities (TCP)
2013-02-06 00:00:00
exploitpack
exploitpack
MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series
2015-04-27 00:00:00
INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service
2015-07-07 00:00:00
checkpoint_advisories
checkpoint_advisories
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution (CVE-2013-0230)
2013-06-24 00:00:00
packetstorm
packetstorm
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution
2013-06-05 00:00:00
MiniUPnPd 1.0 Stack Overflow
2015-04-27 00:00:00
MiniUPNPd 1.0 Remote Denial Of Service
2015-07-08 00:00:00
cve
cve
CVE-2013-0230
2013-01-31 21:55:01
CVE-2013-1461
2013-01-31 21:55:01
zdt
zdt
MiniUPnPd 1.0 Stack Buffer Overflow Remote Code Execution
2013-06-05 00:00:00
INFOMARK IMW-C920W miniupnpd 1.0 - Denial of Service Vulnerability
2015-07-08 00:00:00
exploitdb
exploitdb
MiniUPnPd 1.0 (MIPS) - Remote Stack Overflow Remote Code Execution for AirTies RT Series
2015-04-27 00:00:00
INFOMARK IMW-C920W MiniUPnPd 1.0 - Denial of Service
2015-07-07 00:00:00
thn
thn
Security Flaws in UPnP protocol put 50 million devices at risk
2013-01-29 06:04:00
Security Flaws in UPnP protocol put 50 million devices at risk
2013-01-29 17:04:00
nessus
nessus
MiniUPnP < 1.4 Multiple Vulnerabilities
2013-01-31 00:00:00
metasploit
metasploit
UPnP SSDP M-SEARCH Information Discovery
2010-11-09 06:24:32
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
Low
EPSS
0.859
Percentile
98.6%
Related for CVE-2013-1462