bugtraq - [CVE-2013-2745, CVE-2013-2738, CVE-2013-2739] MiniDLNA v1.0.25 Multiple Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CAJPzsLMpVfE5mC4PT2+e85q-hsxR5bA-ziHKF4iZ1q3d6zmVcQ@mail.gmail.com>
Date: Mon, 15 Jul 2013 18:38:49 -0400
From: Craig Young <vuln-report@...ur3.us>
To: bugtraq@...urityfocus.com
Subject: [CVE-2013-2745, CVE-2013-2738, CVE-2013-2739] MiniDLNA v1.0.25
 Multiple Vulnerabilities

MiniDLNA prior to v1.1.0 (http://sourceforge.net/projects/minidlna/)
is prone to a variety of issues which could be used to take control of
a host running this software.

CVE-2013-2738 and CVE-2013-2745 are SQL injection issues.
CVE-2013-2739 has been assigned for a heap-based buffer overflow which
was introduced when they fixed the stack buffer overflow discussed by
Zachary Cutlip at Black Hat 2012 & DC20.  Link:
http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf

These SQL injection vectors are separate from what Cutlip described
but they can also be used to retrieve arbitrary files from the system
or to stage an overflow payload as is detailed in the above link.

I strongly advise anyone using this program to update to the latest version.

Kind Regards,
Craig Young
@CraigTweets