MiniUPnP MiniUPnPd ProcessSSDPRequest Denial of Service (CVE-2013-0229)

A denial of service vulnerability has been reported in MiniUPnP MiniUPnPd. The vulnerability is due to a boundary error in ProcessSSDPRequest function. A remote attacker can exploit this vulnerability by sending specially crafted packet to the target. Successful exploitation could cause the servi...

MiniUPnP Multiple Denial of Service Vulnerabilities (TCP)

MiniUPnP is prone to multiple denial of service DoS vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MiniUPnP < 1.4 Multiple DoS Vulnerabilities

MiniUPnP is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Integer overflow

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service incorrect memory copy via a SOAPAction header that lacks a " double quote character, a different vulnerability th...

CVE-2013-1462

Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service incorrect memory copy via a SOAPAction header that lacks a " double quote character, a different vulnerability th...

CVE-2013-1461

The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service NULL pointer dereference and service crash via a SOAPAction header that lacks a pound sign character, a different vulnerability than...

Null pointer dereference

The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service NULL pointer dereference and service crash via a SOAPAction header that lacks a pound sign character, a different vulnerability than...

CVE-2013-0230

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method...

CVE-2013-0229

CVE-2013-0229 is a vulnerability in MiniUPnP MiniUPnPd prior to 1.4 where the ProcessSSDPRequest function (minissdp.c) contains a boundary error that can trigger a buffer over-read. A remote attacker can send a crafted SSDP/M-SEARCH request to cause a denial of service (service crash). The issue ...

CVE-2013-0230

Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method...

MiniUPnP < 1.4 Multiple Vulnerabilities

According to its banner, the version of MiniUPnP running on the remote host is prior to 1.4. It is, therefore, affected by the following vulnerabilities : - An out-of-bounds read error exists in the ProcessSSDPRequest function in file minissdp.c that allows an unauthenticated, remote attacker to...

Security Flaws in UPnP protocol put 50 million devices at risk

A Security Flaw in Universal Plug & Play UPnP are exposing more than 50 millions of computers, printers and storage drives to attack by hackers remotely. Rapid7 said Tuesday in a research paper, that problem lies in routers and other networking equipment that use a commonly employed standard know...

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable...

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable. M-SEARCH HTTP/1.1 Host:239.255.255.250:1900...