Code injection

The workgroup bridge aka WGB functionality in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service dropped connection via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374...

Default credentials

Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 does not properly handle multiple SSH sessions, which allows physically proximate attackers to read a password, related to an "arrow key failure," aka Bug ID CSCtg51544...

CVE-2010-2988

The CVE-2010-2988 entry concerns a Cross-site scripting (XSS) vulnerability in Cisco Unified Wireless Network (UWN) Solution 7.x prior to 7.0.98.0. Affected product: Cisco UWN. Vulnerable component/behavior: an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspe...

CVE-2010-2978

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 does not use an adequate message-digest algorithm for a self-signed certificate, which allows remote attackers to bypass intended access restrictions via vectors involving collisions, aka Bug ID CSCtd67660...

CVE-2010-2981

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service device crash by pinging a virtual interface, aka Bug ID CSCte55370...

CVE-2010-2977

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 does not properly implement TLS and SSL, which has unspecified impact and remote attack vectors, aka Bug ID CSCtd01611...

CVE-2010-2984

CVE-2010-2984 affects Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0 on 4404 series controllers. The vulnerability stems from improper implementation of the WEBAUTH_REQD state, allowing remote attackers to bypass intended access restrictions via WLAN traffic (Bug ID CSCtb75305)...

CVE-2010-2984

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 4404 series controllers does not properly implement the WEBAUTHREQD state, which allows remote attackers to bypass intended access restrictions via WLAN traffic, aka Bug ID CSCtb75305...

CVE-2010-2980

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service pbuf exhaustion and device crash via fragmented traffic, aka Bug ID CSCtd26794...

CVE-2010-2979

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 on 5508 series controllers allows remote attackers to cause a denial of service buffer leak and device crash via ARP requests that trigger an ARP storm, aka Bug ID CSCte43508...

CVE-2010-2977

Cisco CVE-2010-2977 affects Cisco Unified Wireless Network (UWN) Solution 7.x before 7.0.98.0, which does not properly implement TLS/SSL. Impact is listed as unspecified in the sources, with remote attack vectors noted; no specific affected components, versions beyond the 7.x line, or exploit det...

CVE-2010-1756

The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network...

Code injection

The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network...

CVE-2010-1756

The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network...

PT-2010-3394 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4 Description: The issue is related to the Settings application not properly reporting the wireless network in use. This could potentially allow remote attackers to trick users into communicating over an unintended...

iPhone AT&T WiFi Settings Open to MiTM Attacks

A security researcher has discovered that any wireless network can pretend to be an AT&T Wi-Fi hot spot and thus lure unsuspecting iPhone users to an untrusted network connection. Read the full article. CNet...

NetworkManager security update

CentOS Errata and Security Advisory CESA-2010:0108 Updated NetworkManager packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. NetworkManager is a network link...

RedHat Update for NetworkManager RHSA-2010:0108-01

Check for the Version of NetworkManager OpenVAS Vulnerability Test RedHat Update for NetworkManager RHSA-2010:0108-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Moderate: Red Hat Security Advisory: NetworkManager security update

Updated NetworkManager packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. NetworkManager is a network link manager that attempts to keep a wired or wireless...

Mandriva Update for kernel MDVSA-2010:030 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2010:030 kernel Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...