CVE-2012-5963

Removed by vendor...

CVE-2012-5958

Removed by vendor...

CVE-2012-5965

Removed by vendor...

CVE-2012-5962

Removed by vendor...

CVE-2012-5962

CVE-2012-5962 is a stack-based buffer overflow in the unique_service_name function of the UPnP Portable SDK (libupnp) used by many devices. The overflow occurs in the SSDP parser when processing a long DeviceType/urn in UDP traffic, enabling potential remote code execution. Public advisories (ope...

CVE-2012-5965

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType aka urn device field in a U...

CVE-2012-5958

CVE-2012-5958 is a stack-based buffer overflow in the unique_service_name() function of the SSDP parser in the Portable SDK for UPnP Devices (libupnp). It allows remote attackers to execute arbitrary code via crafted SSDP/UPnP traffic before version 1.6.18. Public advisories note the vulnerabilit...

CVE-2012-5960

Removed by vendor...

CVE-2012-5959

CVE-2012-5959 is a stack-based buffer overflow in libupnp’s unique_service_name() in the SSDP parser, triggered by a long UDN containing :: in UDP SSDP requests. Affects portable SDK for UPnP Devices/libupnp before 1.6.18; remote attacker could cause arbitrary code execution. Public advisories sh...

Broadcom UPnP Remote Preauth Root Code Execution

DefenseCode Security Advisory http://www.defensecode.com/ Broadcom UPnP Remote Preauth Root Code Execution Vulnerability Advisory ID: DC-2013-01-003 Advisory Title: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability Advisory URL: http://www.defensecode.com/subcategory/advisories-28...

FreeBSD : upnp -- multiple vulnerabilities (2ea6ce3d-6afd-11e2-9d4e-bcaec524bf84)

Project changelog reports : This patch addresses three possible buffer overflows in function uniqueservicename.The three issues have the folowing CVE numbers : - CVE-2012-5958 Issue 2: Stack buffer overflow of Tempbuf - CVE-2012-5959 Issue 4: Stack buffer overflow of Event-UDN - CVE-2012-5960 Iss...

Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities

The Portable Software Developer Kit SDK for Universal Plug-n-Play UPnP Devices contains a libupnp library, originally known as the Intel SDK for UPnP Devices, which is vulnerable to multiple stack-based buffer overflows when handling malicious Simple Service Discovery Protocol SSDP requests. This...

50 Million Potentially Vulnerable to UPnP Flaws

In a project that found more than 80 million unique IP addresses responding to Universal Plug and Play UPnP discovery requests, researchers at Rapid7 were shocked to find that somewhere between 40 and 50 million of those are vulnerable to at least one of three known attacks. A Rapid7 white paper...

Security Flaws in UPnP protocol put 50 million devices at risk

A Security Flaw in Universal Plug & Play UPnP are exposing more than 50 millions of computers, printers and storage drives to attack by hackers remotely. Rapid7 said Tuesday in a research paper, that problem lies in routers and other networking equipment that use a commonly employed standard know...

Security Flaws in UPnP protocol put 50 million devices at risk

A Security Flaw in Universal Plug & Play UPnP are exposing more than 50 millions of computers, printers and storage drives to attack by hackers remotely. Rapid7 said Tuesday in a research paper, that problem lies in routers and other networking equipment that use a commonly employed standard know...

CERT Releases UPnP Security Advisory

Multiple vulnerabilities have been announced in libupnp, the open source portable SDK for UPnP devices. Libupnp is employed by hundreds of vendors for UPnP-enabled devices. Information is also available in CERT Vulnerability Note VU922681. US-CERT recommends that affected UPnP device vendors and...

Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP

Overview The Portable SDK for UPnP Devices libupnp library contains multiple buffer overflow vulnerabilities. Devices that use libupnp may also accept UPnP queries over the WAN interface, therefore exposing the vulnerabilities to the internet. Description Universal Plug and Play UPnP is a set of...

CentOS 6 : vino (CESA-2013:0169)

An updated vino package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

RedHat Update for vino RHSA-2013:0169-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for vino CESA-2013:0169 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...