CVE-2013-1462

Technical details for CVE-2013-1462 are not provided in the supplied documents; connected items discuss other CVEs (e.g., CVE-2013-0230) and related exploits. Monitor for updates.

CVE-2013-0230

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method...

CVE-2013-0229

The MiniUPnP MiniUPnPd daemon (versions prior to 1.4 ) is vulnerable to a denial of service (DoS) condition due to a boundary error in the ProcessSSDPRequest function within minissdp.c. A remote attacker can trigger a buffer over-read by sending a specially crafted M-SEARCH request, causing the s...

PT-2013-2173

Name of the Vulnerable Software and Affected Versions MiniUPnPd version 1.0 Description The issue is related to a stack-based buffer overflow in the ExecuteSoapAction function, which is part of the SOAPAction handler in the HTTP service. This allows remote attackers to execute arbitrary code by...

CVE-2013-1462: Undefined Security Weakness

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service incorrect memory copy via a SOAPAction header that lacks a " double quote character, a different vulnerability th...

PT-2013-3148

Name of the Vulnerable Software and Affected Versions MiniUPnPd version 1.0 Description The issue is related to an integer signedness error in the ExecuteSoapAction function within the SOAPAction handler of the HTTP service. This error can be triggered by a remote attacker sending a SOAPAction...

PT-2013-3147

Name of the Vulnerable Software and Affected Versions MiniUPnPd version 1.0 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and service crash. This is achieved by sending a SOAPAction header that lacks a pound sign character...

PT-2013-2172

Name of the Vulnerable Software and Affected Versions MiniUPnPd versions prior to 1.4 Description The issue is related to the ProcessSSDPRequest function in the SSDP handler, which can be exploited by remote attackers to cause a denial of service. This is achieved by sending a crafted request tha...

CVE-2013-0230: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method...

CVE-2013-1461: Undefined Security Weakness

The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service NULL pointer dereference and service crash via a SOAPAction header that lacks a pound sign character, a different vulnerability than...

CVE-2013-0229: Undefined Security Weakness

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service service crash via a crafted request that triggers a buffer over-read...