FreeBSD -- Kernel memory disclosure in firewire(4)

Problem Description: In the FWGCROM ioctl, a signed integer comparison is used instead of an unsigned integer comparison when computing the length of a buffer to be copied from the kernel into the calling application. Impact: A user in the "operator" group can read the contents of kernel memory...

FreeBSD IEEE 802.11网络子系统远程溢出漏洞

BUGTRAQ ID: 16296 CVECAN ID: CVE-2006-0226 FreeBSD的IEEE 802.11网络子系统可为无线联网实现协议协商。 FreeBSD的IEEE 802.11在处理协议协商时存在漏洞，远程攻击者可能利用此漏洞在主机上执行任意指令。 在扫描已有的无线网络时，如果处理了被破坏的IEEE 802.11信标或探测响应帧的话就会出现整数溢出，导致帧溢出缓冲区。能够广播特制信标或探测响应帧的攻击者可以在任何扫描无线网络的系统上以FreeBSD Kernel权限执行任意代码。 FreeBSD FreeBSD 6.0-STABLE FreeBSD FreeBSD...

Hostaupd IEEE 802.11 authentication daemon DoS

DoS on invalid EAPoL frame...

FreeBSD Security Advisory FreeBSD-SA-06:05.80211

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:05.80211 Security Advisory The FreeBSD Project Topic: IEEE 802.11 buffer overflow Category: core Module: net80211 Announced: 2006-01-18 Credits: Karl Janmar...

FreeBSD IEEE 802.11 wireless network buffer overflow

Buffer overflow on parsing IEEE 802.11 control frames...

Integer overflow

Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...

CVE-2006-0226

Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...

CVE-2006-0226

Integer overflow in IEEE 802.11 network subsystem ieee80211ioctl.c in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted 1 beacon or 2 probe response frames...

CVE-2006-0226

The CVE-2006-0226 issue affects FreeBSD’s IEEE 802.11 network subsystem (net80211). A vulnerable integer overflow occurs in handling corrupted beacon or probe response frames during wireless network scanning, which can allow remote code execution in the kernel on any system actively scanning for ...

[SA18353] FreeBSD IEEE 802.11 Buffer Overflow Vulnerability

TITLE: FreeBSD IEEE 802.11 Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA18353 VERIFY ADVISORY: http://secunia.com/advisories/18353/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote OPERATING SYSTEM: FreeBSD 6.x http://secunia.com/product/6778/ DESCRIPTION: Karl Janma...

IEEE 802.11 -- buffer overflow

Problem description: An integer overflow in the handling of corrupt IEEE 802.11 beacon or probe response frames when scanning for existing wireless networks can result in the frame overflowing a buffer. Impact: An attacker able broadcast a carefully crafted beacon or probe response frame may be...

FreeBSD-SA-06:05.80211

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:05.80211 Security Advisory The FreeBSD Project Topic: IEEE 802.11 buffer overflow Category: core Module: net80211 Announced: 2006-01-18 Credits: Karl Janmar...

Advisory: WZCS vulnerabilities

Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...

PT-2005-2210 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm versions 0.98 and earlier Description: A stack-based buffer overflow issue exists in the ieee putascii function, allowing attackers to execute arbitrary code via a crafted asm file. Recommendations: For nasm versions 0.98 and earlier, at...

CVE-2004-0658

Integer overflow in the hpsballocpacket function incorrectly reported as allochpsbpacket in IEEE 1394 Firewire driver 2.4 and 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via the functions 1 raw1394write, 2 stateconnected, 3 handleremoterequest, or...

OverByte ICS FTP Server - Remote Denial of Service

OverByte ICS FTP Server - Remote Denial of Service //--Exploit: //=========================================================== include include pragma commentlib, \"ws232.lib\" char Nonnullterminatedstring = \"AAAAAAAAAAAAAAAAAA\"; int mainint argc, char argv WSADATA wsaData; WORD...

CVE-2004-0658

CVE-2004-0658 describes an integer overflow in the hpsb_alloc_packet function of the IEEE 1394 (Firewire) driver (versions 2.4 and 2.6). This vulnerability can allow local users to cause a denial of service (crash) and potentially execute arbitrary code through the functions raw1394_write, state_...

CVE-2004-0658

Integer overflow in the hpsballocpacket function incorrectly reported as allochpsbpacket in IEEE 1394 Firewire driver 2.4 and 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via the functions 1 raw1394write, 2 stateconnected, 3 handleremoterequest, or...

CVE-2004-0658: Undefined Security Weakness

Integer overflow in the hpsballocpacket function incorrectly reported as allochpsbpacket in IEEE 1394 Firewire driver 2.4 and 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via the functions 1 raw1394write, 2 stateconnected, 3 handleremoterequest, or...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...