CVE-2007-2874

CVE-2007-2874 describes a buffer overflow in the debugging code (wpa_printf) of wpa_supplicant as packaged in Fedora NetworkManager prior to 0.6.5-3.fc7. The vulnerability allows user‑assisted remote attackers to execute arbitrary code via malformed frames on a WPA2 network. Connected sources con...

CVE-2007-2874

Buffer overflow in the wpaprintf function in the debugging code in wpasupplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to execute arbitrary code via malformed frames on a WPA2 network. NOTE: some of these details are obtained from third part...

[SECURITY] Fedora 7 Update: wpa_supplicant-0.5.7-3.fc7

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

Xsupplicant远程栈溢出漏洞

Xsupplicant是802.1X/WPA/WPA2/IEEE802.11i协议的开放源码实现。 Xsupplicant的eapdonotify函数的实现上存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 远程攻击者可以通过发送特制的EAP报文导致以root用户权限执行任意指令，失败的攻击也可能导致拒绝服务。 open1x xsupplicant 1.2.6 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceforge.net/project/showfiles.php?groupid=60236...