PT-2013-2173

CVE-2013-0230

·

تاريخ النشر

2013-01-31

·

تاريخ التحديث

2016-12-08

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions MiniUPnPd version 1.0
Description The issue is related to a stack-based buffer overflow in the ExecuteSoapAction function, which is part of the SOAPAction handler in the HTTP service. This allows remote attackers to execute arbitrary code by sending a long quoted method.
Recommendations For MiniUPnPd version 1.0, consider disabling the ExecuteSoapAction function as a temporary workaround until a patch is available. Restrict access to the SOAPAction handler in the HTTP service to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾