PT-2013-2173

CVE-2013-0230

·

Publicado

2013-01-31

·

Atualizado

2016-12-08

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions MiniUPnPd version 1.0
Description The issue is related to a stack-based buffer overflow in the ExecuteSoapAction function, which is part of the SOAPAction handler in the HTTP service. This allows remote attackers to execute arbitrary code by sending a long quoted method.
Recommendations For MiniUPnPd version 1.0, consider disabling the ExecuteSoapAction function as a temporary workaround until a patch is available. Restrict access to the SOAPAction handler in the HTTP service to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾