29 matches found
CVE-2008-7138
The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce...
CVE-2008-7138
The CVE-2008-7138 entry identifies Eye-Fi Manager 1.1.2 as affected. The issue is that the Manager generates predictable snonce values tied to the time of day, enabling remote attackers to bypass authentication and upload arbitrary images by guessing the snonce. Connected documents corroborate th...
CVE-2008-7139
Multiple cross-site request forgery CSRF vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of 1 urn:SetOptions for autostart, 2 urn:SetDesktopSync for file upload, or 3...
CVE-2008-7138: Undefined Security Weakness
The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce...
CVE-2008-7139: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of 1 urn:SetOptions for autostart, 2 urn:SetDesktopSync for file upload, or 3...
CVE-2008-7137: Undefined Security Weakness
WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service crash via an empty query string to port 59278 and other unspecified vectors...
Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities
Airscanner Mobile Security Advisory 07122001: Eye-Fi Solution Multiple Vulnerabilities Product: Eye-Fi 1.1.2 Platform: NA Requirements: NA Credits: Seth Fogie Airscanner Mobile Security http://www.airscanner.com December 20, 2007 Risk Level: Medium - Spoofed image injection, redirection of upload...
