Back to Database
Status published
Critical
CVE-2013-0230
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction...
Vulnerability Description
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-0230
Credits & Attribution
No credits recorded in the NVD database.
References
- https://community.rapid7.com/servlet/JiveServlet/download/2150-1-16596/SecurityFlawsUPnP.pdf
- https://community.rapid7.com/servlet/servlet.FileDownload?file=00P1400000cCaFb
- https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play
- http://www.securityfocus.com/bid/57608
- https://www.exploit-db.com/exploits/36839/
More from miniupnp project
View All →CVE-2022-30858
An issue was discovered in ngiflib 0.4. There is SEGV...
Medium
6.5
CVE-2021-36531
ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70...
High
8.8
CVE-2021-36530
ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108...
High
8.8
CVE-2020-24221
An issue was discovered in GetByte function in miniupnp ngiflib...
Medium
5.5
CVE-2019-20219
ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in...
High
8.8
Affected Vendor
miniupnp project
View all reports →Affected Software
miniupnpd
Vulnerable Versions:
1.0
Timeline
Official Publish:
January 31st, 2013
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.