funsec mailing list archives

Re: Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP

From: Valdis.Kletnieks () vt edu
Date: Wed, 30 Jan 2013 16:30:33 -0500

On Tue, 29 Jan 2013 09:06:41 -0800, Paul Ferguson said:

UPnP is a security nightmare. Period.


What, just because its *design purpose* was to allow a machine behind
a firewall to send a "Pants Down!" command to the firewall? :)

Attachment: _bin
Description:

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread:

Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP Jeffrey Walton (Jan 29)
- Re: Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP Paul Ferguson (Jan 29)
  - Re: Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP Valdis . Kletnieks (Jan 30)