CVE-2012-5962

CVE-2012-5962 is a stack-based buffer overflow in the unique_service_name function of the UPnP Portable SDK (libupnp) used by many devices. The overflow occurs in the SSDP parser when processing a long DeviceType/urn in UDP traffic, enabling potential remote code execution. Public advisories (ope...

CVE-2012-5959

A stack-based buffer overflow vulnerability exists in the unique_service_name function within the SSDP parser of the Portable SDK for UPnP Devices (also known as libupnp , formerly the Intel SDK for UPnP devices) prior to version 1.6.18 . The root cause is a boundary error during the parsing of U...

CVE-2012-5958

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...

CVE-2013-0229

The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service service crash via a crafted request that triggers a buffer over-read...

CVE-2012-5965

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType aka urn device field in a U...

CVE-2012-5961

Removed by vendor...

CVE-2012-5960

Removed by vendor...

CVE-2012-5958

A stack-based buffer overflow exists in the unique_service_name function of the SSDP parser within the portable SDK for UPnP Devices (also known as libupnp or the Intel SDK for UPnP devices ) prior to version 1.6.18 . The vulnerability is caused by a boundary error when parsing uuid:schemas:devic...

CVE-2012-5962: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType aka urn field in a UDP pack...

UPnP unique_service_name Buffer Overflow

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...

CVE-2012-5961: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long UDN aka device field in a UDP packet...

Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities

The Portable Software Developer Kit SDK for Universal Plug-n-Play UPnP Devices contains a libupnp library, originally known as the Intel SDK for UPnP Devices, which is vulnerable to multiple stack-based buffer overflows when handling malicious Simple Service Discovery Protocol SSDP requests. This...

CERT Releases UPnP Security Advisory

Multiple vulnerabilities have been announced in libupnp, the open source portable SDK for UPnP devices. Libupnp is employed by hundreds of vendors for UPnP-enabled devices. Information is also available in CERT Vulnerability Note VU922681. US-CERT recommends that affected UPnP device vendors and...

Portable UPnP SDK unique_service_name() Remote Code Execution

This module exploits a buffer overflow in the uniqueservicename function of libupnp's SSDP processor. The libupnp library is used across thousands of devices and is referred to as the Intel SDK for UPnP Devices or the Portable SDK for UPnP Devices. Due to size limitations on many devices, this...

Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP

Overview The Portable SDK for UPnP Devices libupnp library contains multiple buffer overflow vulnerabilities. Devices that use libupnp may also accept UPnP queries over the WAN interface, therefore exposing the vulnerabilities to the internet. Description Universal Plug and Play UPnP is a set of...

UPnP SSDP M-SEARCH Information Discovery

Discover information from UPnP-enabled systems This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UPnP SSDP M-SEARCH Information Discovery', 'Description' = 'Discover information from UPnP-enabled...

Universal Plug and Play (UPnP) Protocol Detection

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' UPnP. This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network...

iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability

Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability iDefense Security Advisory 04.10.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 10, 2007 I. BACKGROUND Universal Plug and Play UPnP is a group of network protocols that work together to enable devices to...

Microsoft Windows system services privilege escalation

There are several local services SSDP Discovery service, Universal Plug and Play Host service allow any authenticated user to configure service. It makes it possible to specify executable file and elevate privilege to Local System. Also vulnerable: HP Software: "Pml Driver HPZ12" HP Printer...

SSDP and upnp LPE Exploit the invincible amended version-bug warning-the black bar safety net

LPE, I'm here is to shorten the title was so written. LPE is a“Local Privilege Escalation”of the abbreviation, meaning is a local elevation of privileges. This vulnerability is a few days ago in the frsirt see, the original link address as follows:...