100 matches found
CVE-2011-4506
The CVE-2011-4506 entry concerns Thomson/Technicolor TG585 UPnP IGD implementation prior to firmware 7.4.3.2. Affected component: UPnP IGD SOAP AddPortMapping on WAN interface, enabling remote attackers to create arbitrary port mappings via an external forwarding vulnerability. Impact aligns with...
CVE-2011-4501
The CVE-2011-4501 entry describes a flaw in the UPnP IGD implementation (Edimax EdiLinux) on devices including Edimax BR-6104K (firmware <3.25), Edimax 6114Wg, Canyon-Tech CN-WF512 (fw 1.83), Canyon-Tech CN-WF514 (fw 2.08), Sitecom WL-153 (fw
CVE-2011-4505: Undefined Security Weakness
The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
CVE-2011-4502: Improper Neutralization of Special Elements used in an OS Command
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
CVE-2011-4504: Undefined Security Weakness
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
CVE-2011-4506: Undefined Security Weakness
The UPnP IGD implementation on the Thomson aka Technicolor TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
CVE-2011-4503: Undefined Security Weakness
The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
CVE-2011-4500: Undefined Security Weakness
The UPnP IGD implementation on the Cisco Linksys WRT54GX with firmware 2.00.05, when UPnP is enabled, configures the SOAP server to listen on the WAN port, which allows remote attackers to administer the firewall via SOAP requests...
CVE-2011-4501: Undefined Security Weakness
The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...
Fedora Core 11 FEDORA-2009-8804 (gupnp-igd)
The remote host is missing an update to gupnp-igd announced via advisory FEDORA-2009-8804. OpenVAS Vulnerability Test $Id: fcore20098804.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8804 gupnp-igd Authors: Thomas Reinke Copyright: Copyright c 200...
Fedora Core 11 FEDORA-2009-8804 (gupnp-igd)
The remote host is missing an update to gupnp-igd announced via advisory FEDORA-2009-8804. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Fedora 11 : farsight2-0.0.14-1.fc11 / gupnp-igd-0.1.3-3.fc11 / libnice-0.0.9-1.fc11 / etc (2009-8804)
pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in msnslplinkprocessmsg. 2.6.0 has Voice and Video support via farsight2 Fedora 11+ only and numerous other bug fixes. farsight2, libnice and gupnp- igd are version upgrades to make voice and video actually work on Fedor...
[SECURITY] Fedora 11 Update: gupnp-igd-0.1.3-3.fc11
gupnp-igd is a library to handle UPnP IGD port mapping...
UPnP Internet Gateway Device (IGD) Port Mapping Manipulation
According to its UPnP data, the remote device is a NAT router that supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to add 'port mappings' that redirect ports from the device's external interface to the scanner address. An unauthenticated, remote...
UPnP Internet Gateway Device (IGD) External IP Address Reachable
According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Nessus was able to retrieve the external IP address of the device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35708;...
Internet Gateway Device WAN Interface UPnP Access
Nessus was able to add 'port mappings' to the remote IGD router by sending a SOAP request to its external interface. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35710; scriptversion"$Revision: 1.8 $"; scriptcvsdate"$Date: 2016/10/13 15:15:41 $";...
Buffer overflow
Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...
CVE-2007-3744
Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...
Heap overflow
Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...
CVE-2007-3748
Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...