1476 matches found
Microsoft Windows UPnP Service Remote Code Execution (MS07-019; CVE-2007-1204)
The Universal Plug and Play UPnP service in Microsoft Windows is vulnerable to remote code execution. UPnP is a set of computer network protocols that extends Plug and Play to allow computers and devices to configure network services automatically. A remote attacker may exploit this issue to caus...
[Full-disclosure] Flaw in AVM UPNP service for windows
Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...
avm-traversal.txt
Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...
Linksys WRT54GXv2 UPnP请求处理漏洞
WRT54GXv2是一款流行的无线宽带路由器。 WRT54GXv2的UPnP功能的实现上存在漏洞，远程攻击者可能利用此漏洞绕过某些安全限制。 如果启用了UPnP的话，WRT54GXv2就会接受发送到WAN接口UPnP请求，攻击者可以通过向设备发送AddPortMapping命令打开任意端口。 Linksys WRT54GX v2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.linksys.com...
[SA22326] Linksys WRT54GXv2 Insecure Universal Plug and Play Configuration
TITLE: Linksys WRT54GXv2 Insecure Universal Plug and Play Configuration SECUNIA ADVISORY ID: SA22326 VERIFY ADVISORY: http://secunia.com/advisories/22326/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Linksys WRT54GX2 Wireless-G Broadband Router with...
Multiple Linksys/ ZyXel / Edimax / Sitecom routers UPnP problems
UPnP AddPortMapping request requires no authentication. It makes it possible to create mapping between any external port and internal IP/port. Additionally, insufficient paramters validation allows code execution on router itself...
jriver.txt
!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...
J. River Media Center 11.0.309 - Remote Denial of Service (PoC)
J. River Media Center 11.0.309 - Remote Denial of Service PoC !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a...
J. River Media Center 11.0.309 - Remote Denial of Service (PoC)
!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...
J. River Media Center 11.0.309 Remote Denial of Service PoC
No description provided by source. !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the...
J. River Media Center 11.0.309 Remote Denial of Service PoC
Exploit for unknown platform in category dos / poc =========================================================== J. River Media Center 11.0.309 Remote Denial of Service PoC =========================================================== !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Cent...
Multiple D-Link routers fail to properly process UPnP M-SEARCH requests
Overview A buffer overflow vulnerability in the software that operates certain models of D-Link routers could allow a remote attacker to execute arbitrary code on the affected device. Description UPnP Universal Plug and Play UPnP is a system that allows network devices to operate together. M-SEAR...
D-Link routers UPNP buffer overflow
Buffer overflow on oversized UPNP TCP/1900 M-SEARCH request...
D-Link Router UPNP Stack Overflow Denial of Service Exploit (PoC)
No description provided by source. / routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC Written By: ub3rst4r aka...
D-Link Router UPNP Stack Overflow Denial of Service Exploit (PoC)
Exploit for hardware platform in category dos / poc ================================================================= D-Link Router UPNP Stack Overflow Denial of Service Exploit PoC ================================================================= / routers affected from eEye's advisory. /str0ke...
D-Link Devices - UPNP Stack Overflow Denial of Service (PoC)
/ routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC Written By: ub3rst4r aka DiGiTALSTR Tested Against: DI-524 Rev....
D-Link Devices - UPNP Stack Overflow Denial of Service (PoC)
D-Link Devices - UPNP Stack Overflow Denial of Service PoC / routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC...
D-Link Router UPNP Stack Overflow
D-Link Router UPNP Stack Overflow Release Date: July 13, 2006 Date Reported: February 27, 2006 Patch Development Time In Days: 136 Severity: High Remote Code Execution Vendor: D-Link Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A...
CVE-2006-3687
The CVE-2006-3687 issue is a stack-based buffer overflow in the UPnP service of several D-Link routers (DI-524, DI-604, DI-624, DI-784, WBR-1310, WBR-2310, EBR-2310) triggered by an oversized M-SEARCH UDP 1900 request. The CERT document notes this could allow a remote attacker to execute arbitrar...
D-Link Routers - UPNP Buffer Overflow
D-Link Routers - UPNP Buffer Overflow source: https://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...