CVE-2009-0282

CVE-2009-0282 describes an integer overflow in multiple Ralink wireless drivers (RT73 3.08 for Windows and Linux drivers rt2400, rt2500, rt2570, rt61) when processing a Probe Request with a long SSID, likely related to integer signedness. This can allow a remote attacker to crash the system and, ...

Ralinktech wireless cards drivers vulnerability

Some Ralinktech wireless cards drivers are suffer from integer overflow. by sending malformed 802.11 Probe Request packet with no care about victim's MACBSSSSID can cause to remote code execution in kernel mode. In order to exploit this issue, the attacker should send a Probe Request packet with...

Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference

Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...

[SECURITY] Fedora 9 Update: kvm-65-15.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

Code injection

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service crash via a long ping packet "ping of death". NOTE: the severity of this issue has been disputed since there are limited attack scenarios...

CVE-2008-2092

The CVE-2008-2092 issue affects the Linksys SPA-2102 Phone Adapter with firmware 3.3.6, where a remote attacker can cause a denial-of-service (crash) by sending a long ping packet (ping of death) over the network. The available records state this is a network-facing flaw with high impact (CVSS v2...

[SECURITY] Fedora 8 Update: kvm-60-2.fc8

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

CVE-2007-5792

The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session...

Session fixation

The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session...

CVE-2007-5791

The CVE-2007-5791 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD failing to verify that SIP INVITE messages originate from a legitimate server, enabling remote attackers to spoof INVITEs. This can trigger a flood of messages causing a denial of service and may facilitate calls with m...

CVE-2007-5792

The Vonage Motorola Phone Adapter VT 2142-VD does not encrypt RTP packets, which might allow remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session...

CVE-2007-5792

The CVE-2007-5792 entry concerns the Vonage Motorola Phone Adapter VT 2142-VD, where RTP packets are not encrypted. This allows remote attackers to eavesdrop by sniffing the network and reconstructing the RTP session. CVSSv2 base score: 7.1 (HIGH); vector: AV:N/AC:M/Au:N/C:C/I:N/A:N. No explicit ...

CVE-2007-5791

The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which allows remote attackers to send spoofed INVITE messages, as demonstrated by a flood of messages triggering a denial of service, and by phone calls with...

Design/Logic Flaw

Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame...

CVE-2007-2927

Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame...

CVE-2007-2927

CVE-2007-2927 affects Atheros 802.11 a/b/g wireless driver for Windows. The vulnerability arises from how the affected drivers handle malformed 802.11 management frames, enabling an unauthenticated, remote attacker within radio range to trigger a denial-of-service condition by sending specially c...

CVE-2007-2927

Unspecified vulnerability in Atheros 802.11 a/b/g wireless adapter drivers before 5.3.0.35, and 6.x before 6.0.3.67, on Windows allows remote attackers to cause a denial of service via a crafted 802.11 management frame...

bochs IA-32 emulator privilege escalation

Buffer overflow in network adapter emulation...

vonage-default.txt

Vonage VoIP Telephone Adapter Default Misconfiguration The Vonage VoIP Telephone Adapter device is, by default, accessible from the WLAN/internet. The product ships with the default username of 'user' and default password of 'user' to access the administrative backend. Users are suggested to upda...

CVE-2007-3047

The CVE-2007-3047 vulnerability affects the Vonage VoIP Telephone Adapter, where a default admin username/password of user/user enables remote administrative access. According to the documented metrics, the issue has a CVSS v2 base score of 10.0 (HIGH) with network access, no authentication, and ...