CVE-2013-0230
EXPLOITEDminiupnpd 1.0 - Remote Code Execution via Long Quoted Method in SOAPAction Handler
Title source: llmExploitation Summary
CVE-2013-0230 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, Todor Donev, Onur Alanbel (BGA), including a Metasploit module exploits/linux/upnp/miniupnpd_soap_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in MiniUPnPd 1.0 via a malformed SOAPAction HTTP header, allowing remote code execution. The exploit constructs a payload with a jump instruction, valid SOAP action, and shellcode, targeting a specific return address to bypass stack protections.
Description
Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary code via a long quoted method.
Exploits (4)
This Metasploit module exploits a stack buffer overflow in MiniUPnPd 1.0 via a malformed SOAPAction HTTP header, allowing remote code execution. The exploit constructs a payload with a jump instruction, valid SOAP action, and shellcode, targeting a specific return address to bypass stack protections.
This Perl script exploits CVE-2013-0230, a denial-of-service vulnerability in miniupnpd/1.0. It crafts a malformed SSDP packet with an oversized payload and sends it via raw sockets to crash the target service.
This exploit targets a stack overflow vulnerability in MiniUPnPd 1.0 (CVE-2013-0230) on AirTies RT Series routers, delivering a reverse shell via a crafted SOAP request. It uses MIPS shellcode and ROP gadgets to bypass protections and execute arbitrary code.
This Metasploit module exploits a stack buffer overflow in MiniUPnPd 1.0 via the SOAPAction HTTP header, allowing remote code execution on vulnerable systems. It includes targets for Debian GNU/Linux 6.0 and Airties RT-212 devices.