NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow

NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow source: https://www.securityfocus.com/bid/21251/info NetGear WG311v1 Wireless devices are prone to a heap-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it...

Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'Broadcom Wireless Driver Probe Response SSID Overflow',...

CVE-2006-5882: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field...

Broadcom Wireless Driver Probe Response SSID Overflow Expl (meta)

Exploit for unknown platform in category remote exploits ==================================================================== Broadcom Wireless Driver Probe Response SSID Overflow Exploit meta ==================================================================== require 'msf/core' module Msf class...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

Broadcom Wireless Driver - Probe Response SSID Overflow Metasploit $Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Broadcom wireless drivers buffer overflow

Buffer overflow on oversized SSID...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

$Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5741

Multiple cross-site scripting XSS vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via 1 the 404 error page of the Smart Sensor Edge Sensor; 2 the user name for a failed logon, when displayed in the audit journals reviewin...

CVE-2006-5742

The AirMagnet Enterprise console and Remote Sensor console Laptop in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting XAS"...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5741

AirMagnet Enterprise (before 7.5 build 6307) is affected by multiple XSS vulnerabilities. The affected component is the Enterprise Web interface and related log viewer, with vectors including (1) the Smart Sensor Edge Sensor 404 error page, (2) the failed-login username displayed in the audit jou...

CVE-2006-5743: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to inject arbitrary web script or HTML via 1 an Access Point with a crafted SSID, 2 the name of the sensor WIDS, 3 the name of the Highwall EndPoi...

CVE-2006-5742: Undefined Security Weakness

The AirMagnet Enterprise console and Remote Sensor console Laptop in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting XAS"...

Microsoft Windows无线网络客户端SSID广播漏洞

Microsoft Windows 2000、XP和2003的无线客户端提供了无线网络连接管理功能。 Microsoft的无线网络客户端在处理网络连接的SSID时存在漏洞，可能导致信息泄露或无线网络不正常。 假设用户A在家中的无线接入点SSID为“linksys”且已建立到笔记本的连接。如果用户A在公共场合打开了笔记本，而此时附近的用户B所使用的笔记本恰好配置了广播SSID为“linksys”的ad-hoc网络。则用户A的笔记本在启动时会搜索SSID “linksys”并连接到用户B的ad-hoc网络。当用户A以后再次启动笔记本时如果没有连接到Ethernet电缆且没有“linksys”...

KisMac MacOS sniffer buffer overflow

Buffer overflow on parsing SSID paramtere of Cisco vendor-specific tags...

[Full-disclosure] Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Happy PPC Hacking Project www.hardened-php.net -= Security Advisory =- Advisory: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow Release Date: 2006/03/23 Last Modified: 2006/03/23 Author: Stefan Esser [email protected] Application: KisMAC dev...

Advisory: WZCS vulnerabilities

Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...

Debian DSA-788-1 : kismet - several vulnerabilities

Several security related problems have been discovered in kismet, a wireless 802.11b monitoring tool. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2626 Insecure handling of unprintable characters in the SSID. - CAN-2005-2627 Multiple integer...