broadcom_wifi_ssid.rb.txt

require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID 'Broadcom Wireless Driver Probe Response SSID Overflow', 'Description' = %q This module exploits a stack overflow in the Broadcom Wireless driver that allows remote code execution in kernel mode by sending a 802.11...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

Broadcom Wireless Driver - Probe Response SSID Overflow Metasploit $Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

[SA22831] Broadcom Wireless Driver Probe Response SSID Buffer Overflow

---------------------------------------------------------------------- To improve our services to our customers, we have made a number of additions to the Secunia Advisories and have started translating the advisories to German. The improvements will help our customers to get a better understandi...

Broadcom Wireless Driver (BCMWL5.SYS) Probe Response SSID Overflow

The Windows remote host contains a Broadcom wireless device driver. The installed version of this driver on the remote host includes the file 'bcmwl5.sys' that is reportedly affected by a stack-based overflow vulnerability. An attacker within wireless range of the affected host may be able to...

Broadcom Wireless Driver Probe Response SSID Overflow Expl (meta)

Exploit for unknown platform in category remote exploits ==================================================================== Broadcom Wireless Driver Probe Response SSID Overflow Exploit meta ==================================================================== require 'msf/core' module Msf class...

Broadcom Wireless Driver - Probe Response SSID Overflow (Metasploit)

$Id: broadcomwifissid.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

D-Link DWL-G132 - Wireless Driver Beacon Rates Overflow (Metasploit)

$Id: dlinkwifirates.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Mac OS X Apple Airport wireless driver memory corruption

Memory corruption on probe response frame parsing...

RHEL 4 : kernel (RHSA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

CentOS 4 : kernel (CESA-2006:0689)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0689 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

CVE-2006-3507

Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network...

CVE-2006-3509

Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service crash or execute arbitrary code in third-party wireless software that uses the API via crafted frames...

CVE-2006-3508

CVE-2006-3508 concerns a heap-based buffer overflow in the Apple AirPort wireless driver for Mac OS X 10.4.7, occurring during scan cache updates. With a locally proximate attacker injecting a crafted 802.11 frame, this can crash the system, elevate privileges, or allow arbitrary code execution w...

CVE-2006-3507

CVE-2006-3507: In Apple AirPort wireless driver, two stack-based buffer overflows exist in the handling of malformed 802.11 frames on Mac OS X 10.3.9 and 10.4.7. A physically proximate attacker transmitting crafted wireless frames could trigger an overflow and execute arbitrary code with system p...

CVE-2006-3509

CVE-2006-3509 describes an integer overflow in the AirPort wireless driver’s API for third‑party software on Mac OS X v10.4.7 (and related updates). The underlying issue is an overflow that could lead to a buffer overflow in applications using the API, with attackers in near proximity able to tri...

CVE-2006-3508

Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service crash, gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates...

Apple Mac OSX 10.x - AirPort Wireless Driver Multiple Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/20144/info The Apple Mac OS X AirPort wireless driver is prone to multiple buffer-overflow vulnerabilities because it fails to perform sufficient bounds checking before copying data to finite-sized buffers. An attacker can exploit these issues to have...

CentOS 4 : kernel (CESA-2005:808)

Updated kernel packages that fix several security issues and a page attribute mapping bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the...

SUSE-SA:2005:067: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:067 kernel. This kernel update for SUSE Linux 10.0 contains fixes for XEN, various security fixes and bug fixes. This update includes a more recent snapshot of the upcoming XEN 3.0. Many bugs have been fixed. Stability for x8664 h...