1904 matches found
Microsoft Windows无线网络客户端SSID广播漏洞
Microsoft Windows 2000、XP和2003的无线客户端提供了无线网络连接管理功能。 Microsoft的无线网络客户端在处理网络连接的SSID时存在漏洞，可能导致信息泄露或无线网络不正常。 假设用户A在家中的无线接入点SSID为“linksys”且已建立到笔记本的连接。如果用户A在公共场合打开了笔记本，而此时附近的用户B所使用的笔记本恰好配置了广播SSID为“linksys”的ad-hoc网络。则用户A的笔记本在启动时会搜索SSID “linksys”并连接到用户B的ad-hoc网络。当用户A以后再次启动笔记本时如果没有连接到Ethernet电缆且没有“linksys”...
[Full-disclosure] Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy PPC Hacking Project www.hardened-php.net -= Security Advisory =- Advisory: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow Release Date: 2006/03/23 Last Modified: 2006/03/23 Author: Stefan Esser [email protected] Application: KisMAC dev...
KisMac MacOS sniffer buffer overflow
Buffer overflow on parsing SSID paramtere of Cisco vendor-specific tags...
Advisory: WZCS vulnerabilities
Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...
Debian DSA-788-1 : kismet - several vulnerabilities
Several security related problems have been discovered in kismet, a wireless 802.11b monitoring tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2626 Insecure handling of unprintable characters in the SSID. - CAN-2005-2627 Multiple integer...
DSA-788-1 kismet - several
Bulletin has no description...
CVE-2005-2626
Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...
CVE-2005-2626
Removed by vendor...
CVE-2005-2626
Kismet (before 2005-08-R1) is affected by CVE-2005-2626 and CVE-2005-2627 for insecure handling of unprintable SSID characters and multiple integer underflows that could allow remote code execution. Public advisories (Debian DSA-788-1, GLSA 200508-10, Debian DSAs) document remote exploitation vec...
CVE-2005-2626
Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...
CVE-2005-2626
Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...
CVE-2005-2626: Undefined Security Weakness
Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID...
Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default
Overview The Yamaha MusicCAST MCX-1000 server wireless networking interface is enabled by default, cannot be disabled, and operates in Access Point mode. A remote attacker could access the MusicCAST wireless network and potentially any other network connected to the MusicCAST. Description The...
CVE-2004-2080
Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier SSID to a single space, which prevents Red-Alert from correctly identifying the SSID...
CVE-2004-2080
CVE-2004-2080 affects Red-M Red-Alert 2.7.5 with software 3.1 build 24. The issue is that multiple spaces in an SSID are collapsed to a single space, which prevents Red-Alert from correctly identifying the SSID. The connected documents confirm the affected product/version and the underlying cause...
CVE-2004-2080: Undefined Security Weakness
Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier SSID to a single space, which prevents Red-Alert from correctly identifying the SSID...
Red-M Red-Alert Multiple Vulnerabilities
Red-M Red-Alert Multiple Vulnerabilities Product: RedAlert Versions Affected: Tested with hardware version 2.7.5, software v3.1 build 24 Status: Fixed by vendor Vendor URL: http://www.red-m.com Advisory URL: http://genhex.org/releases/031003.txt Author: Bruno Morisson [email protected] Timeline...
[SNS Advisory No.60] Windows XP Disclosure of Registered AP Information
-------------------------------------------------------------------------- SNS Advisory No.60 Windows XP Disclosure of Registered AP Information Problem first discovered: 30 Aug 2002 Published: 4 Dec 2002 http://www.lac.co.jp/security/english/snsadve/60e.html...
CVE-2001-0618
The CVE-2001-0618 entry concerns the Orinoco RG-1000 wireless Residential Gateway. The vulnerability arises because the device uses the last 5 digits of the SSID as the default WEP key, and since the SSID is transmitted in clear, a remote attacker could determine the WEP key and decrypt RG-1000 t...