MS Windows 2k UPNP (getdevicelist) Memory Leak DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows 2k UPNP getdevicelist Memory Leak DoS Exploit ========================================================== / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working o...

MS Windows 2k UPNP (getdevicelist) Memory Leak DoS Exploit

No description provided by source. / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume memory to a point where the target machines...

Microsoft Windows Server 2000 - UPNP getdevicelist Memory Leak Denial of Service

Microsoft Windows Server 2000 - UPNP getdevicelist Memory Leak Denial of Service / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume...

Unchecked Buffer in XP upnp

Unchecked Buffer in Universal Plug and Play Can Lead to System Compromise for Windows XP Q315000 By sending a specially-malformed NOTIFY directive, it would be possible for an attacker to cause code to run in the context of the UPnP service, which runs with system privileges on Windows XP. The UP...

scan for UPNP hosts

Microsoft Universal Plug n Play is running on this machine. This service is dangerous for many different reasons. SPDX-FileCopyrightText: 2005 by John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZipTorrent1.3.7.3.txt

/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...

CVE-2005-0833

Belkin 54G F5D7130 wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication...

CVE-2005-0833

Belkin 54G F5D7130 wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication...

CVE-2005-0833

CVE-2005-0833 affects the Belkin 54G (F5D7130) wireless router. The issue arises from processing UPnP datagrams where URIs are sniffed and accessed without authentication, enabling remote attackers to reach restricted resources. The core weakness is lack of authentication for accessed URIs expose...

CVE-2005-0833: Undefined Security Weakness

Belkin 54G F5D7130 wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication...

UPNP Traffic Detection

Binary data 1948.prm...

Xavi X7028r DSL Router - UPNP Long Request Denial of Service

Xavi X7028r DSL Router - UPNP Long Request Denial of Service source: https://www.securityfocus.com/bid/8252/info A problem has been reported in the handling of requests of excessive length placed to the service on port 280 by the Xavi X7028r DSL router. This may allow an attacker to crash a...

UPnP TCP Helper Detection

The remote host is running Microsoft UPnP TCP helper. If the tested network is not a home network, you should disable this service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11765; scriptversion"1.19"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"UPnP TCP...

Another security problem in Netgear FM114P ProSafe Wireless Router firmware

hi, i found another security problem in netgear prosafe wireless router model FM114P: when remote-access and upnp features are enabled, the WAN connection username and password can be retrieved without any authentication using upnp. if remote management is enabled anyone can do this from the web...

CVE-2001-0877

CVE-2001-0877 describes an unchecked buffer in Windows UPnP NOTIFY handling that can allow remote attackers to cause denial of service or execute code with SYSTEM privileges on Windows XP (and related UPnP-enabled Windows 98/ME). Exploitation via specially malformed NOTIFY messages (SSDP) can tri...

CVE-2001-0876

A buffer overflow vulnerability exists in the Universal Plug and Play (UPnP) service on Windows 98, 98SE, ME, and XP . The root cause is an unchecked buffer when handling NOTIFY directives with a long Location URL , allowing a remote attacker to execute arbitrary code with full privileges (includ...

CVE-2001-0877: Undefined Security Weakness

Universal Plug and Play UPnP on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via 1 a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic e.g., chargen, or 2 via a spoofed SSDP...

UPnP Client Detection

This machine answered to a unicast UPnP NOTIFY packet by trying to fetch the XML description that Nessus advertised. This script was written by John [email protected] Changes by Tenable: - Revised plugin title 9/8/09 include"compat.inc"; ifdescription scriptid10829; scriptversion"1.26"...

Advisory CA-2001-37 Buffer Overflow in UPnP Service On Microsoft Windows

CERT Advisory CA-2001-37 Buffer Overflow in UPnP Service On Microsoft Windows Original release date: December 20, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Microsoft Windows XP Microsoft Windows ME Microsoft Windows 98...

Multiple Remote Windows XP/ME/98 Vulnerabilities

Multiple Remote Windows XP/ME/98 Vulnerabilities Release Date: 12/20/01 Severity: High Systems Affected: Microsoft Windows XP All default systems Microsoft Windows 98 Certain configurations Microsoft Windows 98SE Certain configurations Microsoft Windows ME Certain configurations Description:...