[Full-disclosure] Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Access Point Memory Exhaustion from ARP Attacks =============================================== Advisory ID: cisco-sa-20060112-wireless...

Airport Administrative Traffic Detection (192/UDP)

The remote host is an Airport, Airport Extreme or Airport Express wireless access point. It is possible to gather information about the remote base station such as its connection type or connection time by sending packets to UDP port 192. An attacker connected to this network may also use this...

CVE-2004-2557

CVE-2004-2557 affects NetGear WG602 (WG602v1) Wireless Access Point 1.7.14, which contains a hardcoded admin account: username "superman" and password "21241036". This permits remote configuration changes by an attacker. Connected documents confirm the concrete details; exploitation status and fi...

CVE-2004-2556

CVE-2004-2556 affects NetGear WG602 (WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67, which contain a hardcoded administrator account (username: super, password: 5777364). This flaw allows remote attackers to modify the device configuration. The issue is rooted in a hardcoded credential...

CVE-2004-2557

NetGear WG602 aka WG602v1 Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which allows remote attackers to modify the configuration...

CVE-2002-2149

CVE-2002-2149 describes a buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers. A remote attacker can cause a denial-of-service reboot by sending a long HTTP request to the device’s administrative interface. Documented in NVD/Red Hat CVE entries; CVSS v2 base score 5.0 (Netwo...

CVE-2002-2149

Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service reboot via a long HTTP request to the administrative interface...

AirConnect Default Password (HTTP)

This AirConnect wireless access point still has the default password set for the web interface. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2410

Format string vulnerability in the nminfohandler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call...

CVE-2005-2410

The CVE-2005-2410 entry concerns NetworkManager’s nm_info_handler, where a format string vulnerability arises from improper handling of a Wireless Access Point identifier in a syslog call. The impact described in the sources is remote code execution via crafted input, with attack vector over the ...

CVE-2005-2391

The CVE-2005-2391 entry concerns the 3Com OfficeConnect Wireless 11g Access Point, affected before version 1.03.12. The vulnerability is described as unknown but allows remote attackers to obtain sensitive information through the device’s web interface. The connected sources confirm the product a...

CVE-2005-2391

Unknown vulnerability in 3Com OfficeConnect Wireless 11g Access Point before 1.03.12 allows remote attackers to obtain sensitive information via the web interface...

3com office connect wireless access point information leak

No description provided...

[SA16207] OfficeConnect Wireless 11g Access Point Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2002-1810

CVE-2002-1810 - Affected product: D-Link DWL-900AP+ Access Point, versions 2.1 through 2.2. Vulnerability: Remote attackers can access the TFTP server without authentication and read the config.img file. Impact: config.img contains sensitive information such as the administrative password, WEP en...

CVE-2002-1810

D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information...

Yamaha MusicCAST MCX-1000 wireless network interface operates in Access Point mode by default

Overview The Yamaha MusicCAST MCX-1000 server wireless networking interface is enabled by default, cannot be disabled, and operates in Access Point mode. A remote attacker could access the MusicCAST wireless network and potentially any other network connected to the MusicCAST. Description The...

[SA15393] Cisco Various Products TCP Timestamp Denial of Service

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...