CVE-2009-2174 - GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscript

CVE-2009-2174

Summary

GUPnP 0.12.7 allows remote attackers to cause a denial of service (crash) via an empty (1) subscription or (2) control message.

References

Vulnerable Configurations

cpe:2.3:a:gupnp:gupnp:0.12.7:*:*:*:*:*:*:*
cpe:2.3:a:gupnp:gupnp:0.12.7:*:*:*:*:*:*:*

CVSS

CWE

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	35390
confirm	http://bugzilla.openedhand.com/show_bug.cgi?id=1604 http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NEWS&id=ce714a6700ce03953a2886a66ec57db59205f4e6
fedora	FEDORA-2009-5861 FEDORA-2009-5865
osvdb	55128
secunia	35472 35482
vupen	ADV-2009-1597

Last major update

24-06-2009 - 18:52

Published

23-06-2009 - 21:30

Last modified

24-06-2009 - 18:52