CVE-2007-2390

The CVE-2007-2390 issue is a buffer overflow in Apple Mac OS X iChat’s UPnP IGD handling. Specifically, processing crafted UPnP Internet Gateway Device packets could allow a remote attacker to cause a denial of service or execute arbitrary code. Affected versions are Mac OS X 10.3.9 and 10.4.9. R...

CVE-2007-2386

CVE-2007-2386 describes a buffer overflow in Apple’s mDNSResponder for macOS X (affected 10.4 up to 10.4.9) triggered by crafted UPnP IGD packets, enabling remote code execution or denial of service. Public documentation confirms the issue arises from mDNSResponder processing UPnP IGD data and no...

AVM IGD CTRL Service directory traversal

HTTP directory traversal with TCP/49001 UPNP port...

avm-traversal.txt

Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...

Directory traversal

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...

CVE-2007-0357

CVE-2007-0357 is a directory traversal vulnerability in the AVM IGD CTRL Service of Fritz!DSL 02.02.29. The issue allows remote attackers to read arbitrary files via URL-encoded dot-dot backslash sequences (..%5C) in a URI requested from the AR7 webserver. Affected component is the AVM IGD CTRL S...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to retrieve t...

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure

avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-suppli...