Zyxel Router 3.40 Zynos SMB Data Handling Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23061/info Zyxel Routers running the ZynOS operating system are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected device, denying further network service to...

Mozilla Network Security Service: Multiple vulnerabilities

Background The Mozilla Network Security Service is a library implementing security features like SSL v2/v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME and X.509 certificates. Description Multiple vulnerabilities have been discovered in the Mozilla Network Security Service. Please review the CV...

BlackBerry Z 10 - Buffer Overflow in qconnDoor [MZ-13-05]

--------------------------------------------------------------------- modzero Security Advisory: BlackBerry Z 10 - Buffer Overflow in qconnDoor MZ-13-05 --------------------------------------------------------------------- --------------------------------------------------------------------- 1...

CVE-2013-4216

The TraceOpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users ...

CVE-2013-4217

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...

CVE-2013-4218

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicantkey.pem on all systems, which allows local user...

CVE-2013-4219

Multiple integer overflows in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices allow remote attackers to cause a denial of service component crash or possibly execute arbitrary code via an L5 connection with a crafted PDU value that triggers a...

Design/Logic Flaw

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...

Design/Logic Flaw

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicantkey.pem on all systems, which allows local user...

CVE-2013-4216

The CVE-2013-4216 issue affects the Intel WiMAX Network Service (Intel Wireless WiMAX Connection 2400) up to version 1.5.2. The Trace_OpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c creates or uses wimaxd.log with world-writable permissions, allowi...

CVE-2013-4217

The CVE-2013-4217 entry affects the OSAL crypt module in InfraStack/OSDependent/Linux/OSAL/Services/wimax_osal_crypt_services.c for Intel Wireless WiMAX Connection 2400 devices. The function OSAL_Crypt_SetEncryptedPassword logs a cleartext password during certain attempts to set a password, enabl...

CVE-2013-4219

CVE-2013-4219 : Multiple integer overflows in the Intel WiMAX Network Service up to version 1.5.2 on Intel Wireless WiMAX Connection 2400 devices allow remote attackers to trigger a heap-based buffer overflow via crafted PDU values over an L5 connection, potentially causing a component crash (DoS...

CVE-2013-4216

The TraceOpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users ...

CVE-2013-4218: Undefined Security Weakness

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicantkey.pem on all systems, which allows local user...

CVE-2013-4217: Undefined Security Weakness

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...

CVE-2013-4216: Undefined Security Weakness

The TraceOpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users ...

PT-2013-4904

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions prior to 1.5.3 Description The issue concerns the Trace OpenLogFile function in the Trace module, which uses world-writable permissions for the wimaxd.log file. This allows local users to cause a denial of...

PT-2013-4907

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2 Description The issue is caused by multiple integer overflows that can lead to a denial of service or possibly allow the execution of arbitrary code. This can be triggered by a crafted PDU val...

PT-2013-4905

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2 Description The issue allows local users to obtain sensitive information by reading a log file due to the logging of a cleartext password during certain attempts to set a password by the OSAL...

PT-2013-4906

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions prior to 1.5.3 Description The issue concerns the InitMethodAndPassword function in the Intel WiMAX Network Service, which uses the same RSA private key in supplicant key.pem on all systems. This allows loc...