CVE-2006-2559

CVE-2006-2559 affects Linksys WRT54G Wireless-G Broadband Router. A UPnP request with a modified InternalClient parameter, which is not validated, allows remote attackers to bypass access restrictions and perform unauthorized operations, demonstrated by using AddPortMapping to forward arbitrary t...

CVE-2006-2561

Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter possibly within NewInternalClient, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary...

PT-2006-3505 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

Name of the Vulnerable Software and Affected Versions: Linksys WRT54G Wireless-G Broadband Router affected versions not specified Description: The issue allows remote attackers to bypass access restrictions and conduct unauthorized operations. This is achieved via a UPnP request with a modified...

SSDP and upnp LPE Exploit the invincible amended version-bug warning-the black bar safety net

LPE, I'm here is to shorten the title was so written. LPE is a“Local Privilege Escalation”of the abbreviation, meaning is a local elevation of privileges. This vulnerability is a few days ago in the frsirt see, the original link address as follows:...

CVE-2006-0023

CVE-2006-0023 describes a privilege-elevation vulnerability in Windows XP SP1/SP2 (and possibly other OS) where default service-discretionary access control lists (DACLs) are overly permissive (the so-called Permissive Windows Services DACLs). This allows a low-privileged local user to modify cri...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-3644

CVE-2005-3644 describes a memory exhaustion/DoS condition in the Windows Plug and Play (PnP) service. The issue arises in UPnP handling via RPC calls (PNP_GetDeviceList) in Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, where a remote attacker can request a large output bu...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

Microsoft Windows Server 2000 - UPNP getdevicelist Memory Leak Denial of Service

Microsoft Windows Server 2000 - UPNP getdevicelist Memory Leak Denial of Service / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume...

Microsoft Windows Server 2000 - UPNP 'getdevicelist' Memory Leak Denial of Service

/ Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume memory to a point where the target machines virtual memory gets exhausted. This...

MS Windows 2k UPNP (getdevicelist) Memory Leak DoS Exploit

No description provided by source. / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working on the exploit for MS05-047 i came across a condition where a specially crafted request to upnpgetdevicelist would cause services.exe to consume memory to a point where the target machines...

MS Windows 2k UPNP (getdevicelist) Memory Leak DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================== MS Windows 2k UPNP getdevicelist Memory Leak DoS Exploit ========================================================== / Author: Winny Thomas Nevis Labs, Pune, INDIA Details: While working o...

Unchecked Buffer in XP upnp

Unchecked Buffer in Universal Plug and Play Can Lead to System Compromise for Windows XP Q315000 By sending a specially-malformed NOTIFY directive, it would be possible for an attacker to cause code to run in the context of the UPnP service, which runs with system privileges on Windows XP. The UP...

scan for UPNP hosts

Microsoft Universal Plug n Play is running on this machine. This service is dangerous for many different reasons. SPDX-FileCopyrightText: 2005 by John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZipTorrent1.3.7.3.txt

/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...

CVE-2005-0833

Belkin 54G F5D7130 wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication...

CVE-2005-0833

Belkin 54G F5D7130 wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication...

CVE-2005-0833

CVE-2005-0833 affects the Belkin 54G (F5D7130) wireless router. The issue arises from processing UPnP datagrams where URIs are sniffed and accessed without authentication, enabling remote attackers to reach restricted resources. The core weakness is lack of authentication for accessed URIs expose...

UPNP Traffic Detection

Binary data 1948.prm...

Xavi X7028r DSL Router - UPNP Long Request Denial of Service

Xavi X7028r DSL Router - UPNP Long Request Denial of Service source: https://www.securityfocus.com/bid/8252/info A problem has been reported in the handling of requests of excessive length placed to the service on port 280 by the Xavi X7028r DSL router. This may allow an attacker to crash a...