CVE-2013-1461

Name of the Vulnerable Software and Affected Versions MiniUPnPd version 1.0

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and service crash. This is achieved by sending a SOAPAction header that lacks a # (pound sign) character.

Recommendations For MiniUPnPd version 1.0, as a temporary workaround, consider restricting access to the SOAPAction handler in the HTTP service until a patch is available.