CVE-2013-2600

MiniUPnPd has information disclosure use of snprintf...

CVE-2013-2600

MiniUPnPd has information disclosure use of snprintf...

CVE-2013-2600

MiniUPnPd has information disclosure use of snprintf...

CVE-2013-2600

CVE-2013-2600 concerns MiniUPnPd, where the vulnerability arises from improper use of snprintf in SSDP response construction. Versions 1.8 and earlier are affected. An attacker can trigger an information disclosure by sending a crafted SSDP request with a long ST header; if the header is long eno...

MiniUPnPd Information Disclosure (CVE-2013-2600)

Hi list, I am writing to inform you of an information disclosure vulnerability I noticed in MiniUPnPd a few months back. Specifically, MiniUPnPd versions 1.8 and earlier are prone to an information disclosure vulnerability due to improper use of snprintf while preparing SSDP responses. An attacke...