5
CVSSv2

CVE-2009-2174

Published: 23/06/2009 Updated: 24/06/2009
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

GUPnP 0.12.7 allows remote malicious users to cause a denial of service (crash) via an empty (1) subscription or (2) control message.

Vulnerable Product Search on Vulmon Subscribe to Product

gupnp gupnp 0.12.7

Vendor Advisories

Debian Bug report logs - #534594 CVE-2009-2174: denial of service (crash) via an empty (1) subscription or (2) control message Package: gupnp; Maintainer for gupnp is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Thu, 25 Jun 2009 1 ...

Exploits

source: wwwsecurityfocuscom/bid/35390/info GUPnP is prone to a vulnerability that remote attackers may exploit to cause denial-of-service conditions Versions prior to GUPnP 0128 are affected ======== ACTION MESSAGE ========== POST /Dimming/Control HTTP/11 SOAPAction: "urn:schemas-upnp-org:service:Dimming:1#GetLoadLevelStatus" Host ...