RULE(RULE ID:805682)

Rule General Information
Release Date: 2010-09-23
Rule Name: UPnP Buffer Overflow Vulnerability (CVE-2001-0876)
Severity:
CVE ID:
Rule Protection Details
Description: Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: SecurityFocusBID:3723
http://marc.info/?l=bugtraq&m=100887440810532&w=2
http://marc.info/?l=ntbugtraq&m=100887271006313&w=2
http://www.cert.org/advisories/CA-2001-37.html
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.securityfocus.com/bid/4713/solution