SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

Design/Logic Flaw

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

CVE-2008-3147 concerns WeFi 3.2.1.4.1. When diagnostic mode is enabled, the product stores WEP, WPA, and WPA2 access-point keys in cleartext within files such as ClientWeFiLog.dat, ClientWeFiLog.bak, and possibly a related .inf file under %PROGRAMFILES%\WeFi\Users. This creates local-privilege ri...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

Symantec pcAnywhere Access Server Detection

Symantec pcAnywhere Access Server supports managing multiple pcAnywhere servers thorugh a centralized access point. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid32133; scriptversion"1.13";...

CVE-2003-1346

CVE-2003-1346 affects D-Link DWL-900AP+ wireless access points (firmware versions 2.2, 2.3 and possibly 2.5). The issue allows remote attackers to restore factory default settings by upgrading the firmware via AirPlus Access Point Manager. The impact is description-based: factory defaults can be ...

CVE-2003-1346

D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager...

Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass

Secure Network - Security Research Advisory Vuln name: HTTP Basic Authentication Bypass Systems affected: Boa/0.93.15 with Intersil Extensions based systems i.e. FreeLan 802.11g Wireless Access Point RO80211G-AP Severity: High Local/Remote: Remote Vendor URL: http://www.boa.org -...

CVE-2007-2040

Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password, which allows attackers with physical access to perform arbitrary actions on the device, aka Bug ID CSCsg15192...

D-Link D-LINK DWL-2000AP+ wireless access point DoS

No description provided by source. / ARP FLOODER v0.1 - [email protected] - 2006-12-04 designed to crash D-LINK DWL-2000AP+ compile with: gcc arpflood.c -o arpflood / define BSDSOURCE 1 define GNUSOURCE include stdio.h include stdlib.h include string.h include stdarg.h include fcntl.h include...

MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure]

MyStats =1.0.8 injection sql, multiples xss, array & full path disclosure vendor site: http://emcity.nexenservices.com/mystats/index.php product :MyStats 1.0.8 bug: injection sql, multiples xss, array & full path disclosure risk : medium 1/3 Connexion Variable XSS Exploits:...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5744

Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...

CVE-2006-5744

The CVE-2006-5744 entry concerns Highwall Enterprise and Highwall Endpoint, version 4.0.2.11045, with the management interface vulnerable to multiple SQL injection flaws. The root cause is the inability to properly validate inputs in the management interface, enabling remote attackers to execute ...

Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint management interface

Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface SUMMARY Highwall Enterprise and Highwall Endpoint wireless IDS management interface contain multiple vulnerabilities which can lead to privilege escalation and code execution. DETAILS Web...

Cisco wireless access points unauthorized access

It's possible reset access point security settings to defaults...

Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability ===================================================================== Advisory ID: cisco-sa-20062806-ap.shtml http://www.cisco.com/warp/public/707/cisco-sa-20060628-ap.shtml...

CVE-2006-3291

The web interface on Cisco IOS 12.38JA and 12.38JA1, as used on the Cisco Wireless Access Point and Wireless Bridge, reconfigures itself when it is changed to use the "Local User List Only Individual Passwords" setting, which removes all security and password configurations and allows remote...

Access Point Web-browser Interface Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...