CVE - CVE-2001-0877

CVE-ID
CVE-2001-0877	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:3724 URL:http://www.securityfocus.com/bid/3724 BUGTRAQ:20011220 Multiple Remote Windows XP/ME/98 Vulnerabilities URL:http://marc.info/?l=bugtraq&m=100887440810532&w=2 BUGTRAQ:20020109 UPNP Denial of Service URL:http://www.securityfocus.com/archive/1/249238 CERT:CA-2001-37 URL:http://www.cert.org/advisories/CA-2001-37.html CERT-VN:VU#411059 URL:http://www.kb.cert.org/vuls/id/411059 CIAC:M-030 URL:http://www.ciac.org/ciac/bulletins/m-030.shtml MS:MS01-059 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059 NTBUGTRAQ:20011220 Multiple Remote Windows XP/ME/98 Vulnerabilities URL:http://marc.info/?l=ntbugtraq&m=100887271006313&w=2 XF:win-upnp-udp-dos(7722) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/7722
Date Record Created
20020309	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)