CVE-2001-0877

Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system.

• http://marc.info/?l=bugtraq&m=100887440810532&w=2
• http://marc.info/?l=ntbugtraq&m=100887271006313&w=2
• http://www.cert.org/advisories/CA-2001-37.htmlPatch, Third Party Advisory, US Government Resource
• http://www.ciac.org/ciac/bulletins/m-030.shtml
• http://www.kb.cert.org/vuls/id/411059US Government Resource
• http://www.securityfocus.com/archive/1/249238Vendor Advisory
• http://www.securityfocus.com/bid/3724
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7722
• http://marc.info/?l=bugtraq&m=100887440810532&w=2
• http://marc.info/?l=ntbugtraq&m=100887271006313&w=2
• http://www.cert.org/advisories/CA-2001-37.htmlPatch, Third Party Advisory, US Government Resource
• http://www.ciac.org/ciac/bulletins/m-030.shtml
• http://www.kb.cert.org/vuls/id/411059US Government Resource
• http://www.securityfocus.com/archive/1/249238Vendor Advisory
• http://www.securityfocus.com/bid/3724
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-059
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7722

Published

Dec 20, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-0871Directory traversal vulnerability in HTTP server for Alchemy…
• CVE-2001-0872OpenSSH 3.0.1 and earlier with UseLogin enabled does not pro…
• CVE-2001-0873uuxqt in Taylor UUCP package does not properly remove danger…
• CVE-2001-0874Internet Explorer 5.5 and 6.0 allow remote attackers to read…
• CVE-2001-0875Internet Explorer 5.5 and 6.0 allows remote attackers to cau…
• CVE-2001-0876Buffer overflow in Universal Plug and Play (UPnP) on Windows…
• CVE-2001-0879Format string vulnerability in the C runtime functions in SQ…
• CVE-2001-0884Cross-site scripting vulnerability in Mailman email archiver…
• CVE-2001-0886Buffer overflow in glob function of glibc allows attackers t…
• CVE-2001-0887xSANE 0.81 and earlier allows local users to modify files of…
• CVE-2001-0888Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote…
• CVE-2001-0889Exim 3.22 and earlier, in some configurations, does not prop…