CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

[Full-disclosure] Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.001 8-Feb-2007 Vendor: Aruba Networks, http://www.arubanetworks.com Affected Products: Aruba Mobility Controllers 200, 600, 2400, 6000 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 Vulnerability: Unauthorized Administrative a...

Intel® PROSet/Wireless Software Local Information Disclosure

Summary: A security vulnerability exists in the Intel® PROSet/Wireless Software PROSet application because of insecure usage of shared memory allowing a person having access to the user’s computer or malicious software installed on the user’s computer to obtain access to users’ wireless network...

ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution

Synopsis: ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution Product: ATMEL WLAN drivers 3.4.1.1 Version: =3.4.1.1 Product: ======= ATMEL linux PCI, PCMCIA, USB drivers. and configuration utilities. Issue: ====== A critical security vulnerability has been found in ATMEL WLAN drivers...

Intel PROSet/Wireless软件本地信息泄露漏洞

Intel PROSet/Wireless Software是一款无线网络处理软件。 Intel PROSet/Wireless Software不安全设置共享内存信息，本地攻击者可以利用漏洞获得敏感信息。 问题存在于Intel PROSet/Wireless Software 7.x, 8.x, 9.x, 和10.x PROSet application中，恶意用户可以访问共享内存信息获得WLAN预共享WEP密钥和验证信息，目前没有详细漏洞细节提供。 Intel PRO/Wireless 2100 Network Connection Intel PRO/Wireless 2200BG...

Intel PRO/Wireless网络连接驱动远程代码执行漏洞

Intel PRO/Wireless网络连接是Intel迅驰移动技术所集成的WLAN解决方案。 Intel 2200BG和2915ABG PRO/Wireless网络连接硬件的Microsoft Windows驱动处理某些帧的方式存在内存破坏漏洞，远程攻击者可能利用此漏洞在机器执行任意指令。 Wi-Fi站范围内的攻击者可以通过发送特制的报文来触发这个漏洞，导致以内核级权限执行任意代码。 Intel 2200BG/2915ABG http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm...

Intel® PROSet/Wireless Software Local Information Disclosure

Intel® PROSet/Wireless Software Local Information Disclosure Summary: A security vulnerability exists in the Intel® PROSet/Wireless Software PROSet application because of insecure usage of shared memory allowing a person having access to the user's computer or malicious software installed on the...

CVE-2004-2549

CVE-2004-2549 affects Nortel WLAN APs 2220, 2221, and 2225. A remote attacker can cause a service crash (DoS) by sending a TCP request containing a large string followed by eight newline characters to Telnet (port 23) or HTTP (port 80); the issue is described as possibly due to a buffer overflow....

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...

Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Document ID: 68034 Revision 1.0 For Public Release 2005 November 02 1500 UTC GMT -...

Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access

...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Management Interface DoS Vulnerability

Linksys WRT54G Management Interface DoS Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=308&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and router. More information is availab...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerability

Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=305&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and route...

iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'restore.cgi' Configuration Modification Design Error Vulnerability

Linksys WRT54G 'restore.cgi' Configuration Modification Design Error Vulnerability iDEFENSE Security Advisory 09.13.05 www.idefense.com/application/poi/display?id=306&type=vulnerabilities September 13, 2005 I. BACKGROUND The Linksys WRT54G is a combination wireless access point, switch and router...

CVE-2004-2359

Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality...

CVE-2004-2359

The CVE-2004-2359 entry affects Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0. The flaw is that the TrayApplet does not properly drop SYSTEM privileges when started from the systray applet, allowing local users to escalate privileges by using the Help functionality. Root cause...

[Full-disclosure] Privilege escalation in Linksys WLAN Monitor v2.0.

Summary: Privilege escalation in Linksys WLAN Monitor v2.0 http://www.linksys.com/ Details: The Linksys WLAN Monitor service WLSVC that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the...

linksysWLAN20.txt

Summary: Privilege escalation in Linksys WLAN Monitor v2.0 http://www.linksys.com/ Details: The Linksys WLAN Monitor service WLSVC that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the...