CVE-2013-1461

The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service NULL pointer dereference and service crash via a SOAPAction header that lacks a pound sign character, a different vulnerability than...

CVE-2013-0230

A stack-based buffer overflow exists in the ExecuteSoapAction function of the SOAPAction handler within the HTTP service of MiniUPnP 1.0 . The vulnerability is caused by a boundary error when processing SOAPAction HTTP requests, which allows a remote attacker to execute arbitrary code via a long ...