GLSA-200711-09 : MadWifi: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-09 MadWifi: Denial of Service Clemens Kolbitsch and Sylvester Keil reported an error when processing beacon frames with an overly large 'length' value in the 'xrates' element. Impact : A remote attacker could act as an acce...

Linux Madwifi wireless drivers DoS

Assert on oversized "extended supported rates" beacon frame...

SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS

SEC Consult Security Advisory 20071012-0 =================================================================================== title: Madwifi xrates element remote DOS program: Madwifi linux wlan driver for atheros chipsets vulnerable version: Madwifi = 0.9.3.2 homepage: www.madwifi.org found: July...

Code injection

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

CVE-2007-5448

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

CVE-2007-5448

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

CVE-2007-5448

CVE-2007-5448 affects MadWifi 0.9.3.2 and earlier. A remote attacker can trigger a denial of service (kernel panic) by sending a beacon frame with a large length value in the extended supported rates (xrates) element, exploiting code in net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta...

Mandrake Linux Security Advisory : madwifi-source (MDKSA-2007:132)

The 802.11 network stack in MadWifi prior to 0.9.3.1 would alloa remote attackers to cause a denial of service system hang via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference CVE-2007-2829. The athbeaconconfig function in...

Buffer overflow

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

CVE-2007-0933

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

CVE-2007-0933

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

CVE-2007-2830

The athbeaconconfig function in ifath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service system crash via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error...

CVE-2007-2830

The athbeaconconfig function in ifath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service system crash via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error...

CVE-2007-2830

The athbeaconconfig function in ifath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service system crash via crafted beacon interval information when scanning for access points, which triggers a divide-by-zero error...

Beacon Splash.lang.PHP远程文件包含漏洞

Beacon是一款基于PHP的WEB应用程序。 Beacon不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Splash.lang.PHP'脚本对用户提交的'languagePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 GNU Beacon 0.2 目前没有解决方案提供： http://savannah.gnu.org/projects/beaconoptions...

beacon-rfi.txt

Beacon = 2.0Remot file inclusion languagePath Download script : http://download.savannah.gnu.org/releases/beacon/beacon020.zip Thanks Str0ke Exploit: http://victime.com/pbeaconpath/beacon/language/1/splash.lang.php?languagePath=shell.txt? Discovered by ThE TiGeR MiroTiger100atHotmaildotcom...

Remote file inclusion

PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter...

CVE-2007-2663

The CVE-2007-2663 entry concerns Beacon 0.2.0 with a PHP remote file inclusion vulnerability in language/1/splash.lang.php. The underlying issue is unsafely including a URL via the languagePath parameter, allowing remote attackers to execute arbitrary PHP code. No explicit exploit details or fixe...

CVE-2007-2663

PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter...

CVE-2007-2663: Undefined Security Weakness

PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter...