CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5741

AirMagnet Enterprise (before 7.5 build 6307) is affected by multiple XSS vulnerabilities. The affected component is the Enterprise Web interface and related log viewer, with vectors including (1) the Smart Sensor Edge Sensor 404 error page, (2) the failed-login username displayed in the audit jou...

CVE-2006-5742

The AirMagnet Enterprise console and Remote Sensor console Laptop in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting XAS"...

Microsoft Windows无线网络客户端SSID广播漏洞

Microsoft Windows 2000、XP和2003的无线客户端提供了无线网络连接管理功能。 Microsoft的无线网络客户端在处理网络连接的SSID时存在漏洞，可能导致信息泄露或无线网络不正常。 假设用户A在家中的无线接入点SSID为“linksys”且已建立到笔记本的连接。如果用户A在公共场合打开了笔记本，而此时附近的用户B所使用的笔记本恰好配置了广播SSID为“linksys”的ad-hoc网络。则用户A的笔记本在启动时会搜索SSID “linksys”并连接到用户B的ad-hoc网络。当用户A以后再次启动笔记本时如果没有连接到Ethernet电缆且没有“linksys”...

[Full-disclosure] Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy PPC Hacking Project www.hardened-php.net -= Security Advisory =- Advisory: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow Release Date: 2006/03/23 Last Modified: 2006/03/23 Author: Stefan Esser [email protected] Application: KisMAC dev...

KisMac MacOS sniffer buffer overflow

Buffer overflow on parsing SSID paramtere of Cisco vendor-specific tags...

Advisory: WZCS vulnerabilities

Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...

Debian DSA-788-1 : kismet - several vulnerabilities

Several security related problems have been discovered in kismet, a wireless 802.11b monitoring tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2626 Insecure handling of unprintable characters in the SSID. - CAN-2005-2627 Multiple integer...

DSA-788-1 kismet - several

Bulletin has no description...

CVE-2005-2626

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...

CVE-2005-2626

Removed by vendor...

CVE-2005-2626

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...

CVE-2005-2626

Kismet (before 2005-08-R1) is affected by CVE-2005-2626 and CVE-2005-2627 for insecure handling of unprintable SSID characters and multiple integer underflows that could allow remote code execution. Public advisories (Debian DSA-788-1, GLSA 200508-10, Debian DSAs) document remote exploitation vec...

CVE-2005-2626

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...

Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default

Overview The Yamaha MusicCAST MCX-1000 server wireless networking interface is enabled by default, cannot be disabled, and operates in Access Point mode. A remote attacker could access the MusicCAST wireless network and potentially any other network connected to the MusicCAST. Description The...

CVE-2004-2080

Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier SSID to a single space, which prevents Red-Alert from correctly identifying the SSID...

CVE-2004-2080

CVE-2004-2080 affects Red-M Red-Alert 2.7.5 with software 3.1 build 24. The issue is that multiple spaces in an SSID are collapsed to a single space, which prevents Red-Alert from correctly identifying the SSID. The connected documents confirm the affected product/version and the underlying cause...

Red-M Red-Alert Multiple Vulnerabilities

Red-M Red-Alert Multiple Vulnerabilities Product: RedAlert Versions Affected: Tested with hardware version 2.7.5, software v3.1 build 24 Status: Fixed by vendor Vendor URL: http://www.red-m.com Advisory URL: http://genhex.org/releases/031003.txt Author: Bruno Morisson [email protected] Timeline...

[SNS Advisory No.60] Windows XP Disclosure of Registered AP Information

-------------------------------------------------------------------------- SNS Advisory No.60 Windows XP Disclosure of Registered AP Information Problem first discovered: 30 Aug 2002 Published: 4 Dec 2002 http://www.lac.co.jp/security/english/snsadve/60e.html...

CVE-2001-0618

The CVE-2001-0618 entry concerns the Orinoco RG-1000 wireless Residential Gateway. The vulnerability arises because the device uses the last 5 digits of the SSID as the default WEP key, and since the SSID is transmitted in clear, a remote attacker could determine the WEP key and decrypt RG-1000 t...