CVE-2013-2600

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

MiniUPnPd has information disclosure use of snprintf()

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2013-07/0085.htmlBroken Link
http://archives.neohapsis.com/archives/bugtraq/2013-07/0086.htmlBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/85774Third Party Advisory, VDB Entry
https://seclists.org/bugtraq/2013/Jul/84Exploit, Mailing List, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2600Third Party Advisory
http://archives.neohapsis.com/archives/bugtraq/2013-07/0085.htmlBroken Link
http://archives.neohapsis.com/archives/bugtraq/2013-07/0086.htmlBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/85774Third Party Advisory, VDB Entry
https://seclists.org/bugtraq/2013/Jul/84Exploit, Mailing List, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-2600Third Party Advisory

Timeline

Published: Nov 1, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-26017.5The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to CVE-2013-26029.3Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to execut CVE-2013-260310.0The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpecte CVE-2013-26047.2RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Da CVE-2013-26129.8Command-injection vulnerability in Huawei E587 3G Mobile Hotspot 11.203.27 allows remote attackers to execute arbitrary shell commands with CVE-2013-26157.5lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters CVE-2013-26167.5lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a CVE-2013-26177.5lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2013-26184.3Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web sc CVE-2013-26195.0Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot) to the default URI CVE-2013-26216.1Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websi CVE-2013-26226.1Cross-site Scripting (XSS) in UebiMiau 2.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the "selected_t