MiniSSDPd Multiple Remote Vulnerabilities

Bugtraq ID:	48935
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 29 2011 12:00AM
Updated:	Jul 29 2011 12:00AM
Credit:	Kees Cook
Vulnerable:	MiniUPnP Project MiniSSDPd 0
Not Vulnerable:

MiniSSDPd Multiple Remote Vulnerabilities

MiniSSDPd is prone to multiple remote vulnerabilities:

1. Multiple buffer-overflow issues
2. Multiple denial-of-service issues
3. An information-disclosure issue

Successful exploits can allow attackers to obtain sensitive information, execute arbitrary code in the context of application or cause denial-of-service conditions.

MiniSSDPd Multiple Remote Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and may not require specific exploit code.

MiniSSDPd Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

MiniSSDPd Multiple Remote Vulnerabilities

References:

• MiniSSDPd (MiniUPnP Project)
  
• Multiple flaws in minissdpd (Kees Cook)