306 matches found
SSDP and upnp LPE Exploit the invincible amended version-bug warning-the black bar safety net
LPE, I'm here is to shorten the title was so written. LPE is a“Local Privilege Escalation”of the abbreviation, meaning is a local elevation of privileges. This vulnerability is a few days ago in the frsirt see, the original link address as follows:...
CVE-2006-0023
CVE-2006-0023 describes a privilege-elevation vulnerability in Windows XP SP1/SP2 (and possibly other OS) where default service-discretionary access control lists (DACLs) are overly permissive (the so-called Permissive Windows Services DACLs). This allows a low-privileged local user to modify cri...
CVE-2001-1552
CVE-2001-1552 affects Windows ME where the service ssdpsrv.exe can be triggered remotely to cause a denial of service by sending multiple newline characters in an SSDP message. The NVD/CVE records describe the vulnerability as a DoS condition without mentioning code-level details, impacted versio...
CVE-2001-0877
CVE-2001-0877 describes an unchecked buffer in Windows UPnP NOTIFY handling that can allow remote attackers to cause denial of service or execute code with SYSTEM privileges on Windows XP (and related UPnP-enabled Windows 98/ME). Exploitation via specially malformed NOTIFY messages (SSDP) can tri...
CVE-2001-1552
ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...
