CVE-2008-1144

CVE-2008-1144 affects the Netgear WN802T Wi‑Fi AP with Marvell 88W8361P‑BEM1, where the Marvell driver mishandles EAPoL‑Key packets. A crafted EAPoL‑Key with an advertised length can be used by remote authenticated users to cause a denial of service (device reboot or hang) and may enable arbitrar...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2007-5474

CVE-2007-5474 affects Linksys WRT350N (firmware 2.00.17) using Atheros AR5416-AC1E. The vulnerability arises from incorrect parsing of the Atheros vendor-specific information element in an association request, allowing a too-long information element to cause a denial of service (device reboot or ...

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

Design/Logic Flaw

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

CVE-2008-3147 concerns WeFi 3.2.1.4.1. When diagnostic mode is enabled, the product stores WEP, WPA, and WPA2 access-point keys in cleartext within files such as ClientWeFiLog.dat, ClientWeFiLog.bak, and possibly a related .inf file under %PROGRAMFILES%\WeFi\Users. This creates local-privilege ri...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

Symantec pcAnywhere Access Server Detection

Symantec pcAnywhere Access Server supports managing multiple pcAnywhere servers thorugh a centralized access point. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid32133; scriptversion"1.13";...

CVE-2003-1346

D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager...

CVE-2003-1346

CVE-2003-1346 affects D-Link DWL-900AP+ wireless access points (firmware versions 2.2, 2.3 and possibly 2.5). The issue allows remote attackers to restore factory default settings by upgrading the firmware via AirPlus Access Point Manager. The impact is description-based: factory defaults can be ...

Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass

Secure Network - Security Research Advisory Vuln name: HTTP Basic Authentication Bypass Systems affected: Boa/0.93.15 with Intersil Extensions based systems i.e. FreeLan 802.11g Wireless Access Point RO80211G-AP Severity: High Local/Remote: Remote Vendor URL: http://www.boa.org -...

CVE-2007-2040

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

D-Link D-LINK DWL-2000AP+ wireless access point DoS

No description provided by source. / ARP FLOODER v0.1 - [email protected] - 2006-12-04 designed to crash D-LINK DWL-2000AP+ compile with: gcc arpflood.c -o arpflood / define BSDSOURCE 1 define GNUSOURCE include stdio.h include stdlib.h include string.h include stdarg.h include fcntl.h include...

MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure]

MyStats =1.0.8 injection sql, multiples xss, array & full path disclosure vendor site: http://emcity.nexenservices.com/mystats/index.php product :MyStats 1.0.8 bug: injection sql, multiples xss, array & full path disclosure risk : medium 1/3 Connexion Variable XSS Exploits:...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5744

The CVE-2006-5744 entry concerns Highwall Enterprise and Highwall Endpoint, version 4.0.2.11045, with the management interface vulnerable to multiple SQL injection flaws. The root cause is the inability to properly validate inputs in the management interface, enabling remote attackers to execute ...