Linksys WRT54GXv2 UPnP请求处理漏洞

WRT54GXv2是一款流行的无线宽带路由器。 WRT54GXv2的UPnP功能的实现上存在漏洞，远程攻击者可能利用此漏洞绕过某些安全限制。 如果启用了UPnP的话，WRT54GXv2就会接受发送到WAN接口UPnP请求，攻击者可以通过向设备发送AddPortMapping命令打开任意端口。 Linksys WRT54GX v2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.linksys.com...

[SA22326] Linksys WRT54GXv2 Insecure Universal Plug and Play Configuration

TITLE: Linksys WRT54GXv2 Insecure Universal Plug and Play Configuration SECUNIA ADVISORY ID: SA22326 VERIFY ADVISORY: http://secunia.com/advisories/22326/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Linksys WRT54GX2 Wireless-G Broadband Router with...

Multiple Linksys/ ZyXel / Edimax / Sitecom routers UPnP problems

UPnP AddPortMapping request requires no authentication. It makes it possible to create mapping between any external port and internal IP/port. Additionally, insufficient paramters validation allows code execution on router itself...

jriver.txt

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

J. River Media Center 11.0.309 - Remote Denial of Service PoC !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

J. River Media Center 11.0.309 Remote Denial of Service PoC

Exploit for unknown platform in category dos / poc =========================================================== J. River Media Center 11.0.309 Remote Denial of Service PoC =========================================================== !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Cent...

J. River Media Center 11.0.309 Remote Denial of Service PoC

No description provided by source. !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the...

Multiple D-Link routers fail to properly process UPnP M-SEARCH requests

Overview A buffer overflow vulnerability in the software that operates certain models of D-Link routers could allow a remote attacker to execute arbitrary code on the affected device. Description UPnP Universal Plug and Play UPnP is a system that allows network devices to operate together. M-SEAR...

D-Link Router UPNP Stack Overflow Denial of Service Exploit (PoC)

No description provided by source. / routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC Written By: ub3rst4r aka...

D-Link routers UPNP buffer overflow

Buffer overflow on oversized UPNP TCP/1900 M-SEARCH request...

D-Link Router UPNP Stack Overflow Denial of Service Exploit (PoC)

Exploit for hardware platform in category dos / poc ================================================================= D-Link Router UPNP Stack Overflow Denial of Service Exploit PoC ================================================================= / routers affected from eEye's advisory. /str0ke...

D-Link Devices - UPNP Stack Overflow Denial of Service (PoC)

/ routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC Written By: ub3rst4r aka DiGiTALSTR Tested Against: DI-524 Rev....

D-Link Devices - UPNP Stack Overflow Denial of Service (PoC)

D-Link Devices - UPNP Stack Overflow Denial of Service PoC / routers affected from eEye's advisory. /str0ke Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A EBR-2310 Rev A WBR-1310 Rev A WBR-2310 Rev A / / D-Link Router UPNP DOS PoC...

D-Link Router UPNP Stack Overflow

D-Link Router UPNP Stack Overflow Release Date: July 13, 2006 Date Reported: February 27, 2006 Patch Development Time In Days: 136 Severity: High Remote Code Execution Vendor: D-Link Routers Affected: DI-524 Rev A DI-524 Rev C DI-524 Rev D DI-604 Rev E DI-624 Rev C DI-624 Rev D DI-784 Rev A...

CVE-2006-3687

The CVE-2006-3687 issue is a stack-based buffer overflow in the UPnP service of several D-Link routers (DI-524, DI-604, DI-624, DI-784, WBR-1310, WBR-2310, EBR-2310) triggered by an oversized M-SEARCH UDP 1900 request. The CERT document notes this could allow a remote attacker to execute arbitrar...

D-Link Routers - UPNP Buffer Overflow

D-Link Routers - UPNP Buffer Overflow source: https://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...

D-Link Routers - UPNP Buffer Overflow

source: https://www.securityfocus.com/bid/19006/info D-Link wired and wireless routers are prone to a buffer-overflow vulnerability because these devices fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successful exploits can allow...

CVE-2006-3344

Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component...

CVE-2006-3344

Siemens Speedstream Wireless Router 2624 is affected by CVE-2006-3344 via the UPnP/1.0 component, allowing local users to bypass authentication and access protected files. The issue is tied to UPnP/1.0 usage in the router, with impact described as partial on confidentiality, integrity, and availa...