Lucene search
+L

1375 matches found

Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.48 views

NetGear WG111v2 Wireless Driver Long Beacon Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NetGear...

10CVSS0.5AI score0.19307EPSS
SaveExploits3
Prion
Prion
added 2009/08/18 9:0 p.m.17 views

Null pointer dereference

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...

7.8CVSS6.7AI score0.03357EPSS
SaveExploits0References7Affected Software2
UbuntuCve
UbuntuCve
added 2009/08/18 9:0 p.m.31 views

CVE-2009-2844

cfg80211 in net/wireless/scan.c in the Linux kernel 2.6.30-rc1 and other versions before 2.6.31-rc6 allows remote attackers to cause a denial of service crash via a sequence of beacon frames in which one frame omits an SSID Information Element IE and the subsequent frame contains an SSID IE, whic...

7.8CVSS6AI score0.03357EPSS
SaveExploits0References1
exploitpack
exploitpack
added 2009/08/18 12:0 a.m.15 views

Linux Kernel 2.6.30.5 - cfg80211 Remote Denial of Service

Linux Kernel 2.6.30.5 - cfg80211 Remote Denial of Service / cfg80211-remote-dos.c Linux Kernel http://jon.oberheide.org Information: http://patchwork.kernel.org/patch/41218/ These pointers can be NULL, the ismesh case isn't ever hit in the current kernel, but cmpies can be hit under certain...

0.1AI score
SaveExploits0
seebug.org
seebug.org
added 2009/08/18 12:0 a.m.32 views

Linux Kernel < 2.6.30.5 cfg80211 Remote Denial of Service Exploit

No description provided by source. / cfg80211-remote-dos.c Linux Kernel 2.6.30.5 cfg80211 Remote DoS Jon Oberheide [email protected] http://jon.oberheide.org Information: http://patchwork.kernel.org/patch/41218/ These pointers can be NULL, the ismesh case isn't ever hit in the current kernel, but...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/08/18 12:0 a.m.34 views

Linux Kernel < 2.6.30.5 - 'cfg80211' Remote Denial of Service

/ cfg80211-remote-dos.c Linux Kernel http://jon.oberheide.org Information: http://patchwork.kernel.org/patch/41218/ These pointers can be NULL, the ismesh case isn't ever hit in the current kernel, but cmpies can be hit under certain conditions. Usage: $ gcc cfg80211-remote-dos.c -o...

5.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.18 views

Mandriva Update for madwifi-source MDVSA-2008:007 (madwifi-source)

Check for the Version of madwifi-source OpenVAS Vulnerability Test Mandriva Update for madwifi-source MDVSA-2008:007 madwifi-source Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

4.3CVSS6.5AI score0.01968EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2009/02/04 3:5 p.m.7 views

kernel: libertas: fix buffer overrun

Buffer overflow in the lbsprocessbss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beacon/probe response."...

10CVSS6AI score0.05261EPSS
SaveExploits1References4
Prion
Prion
added 2008/11/18 4:0 p.m.25 views

Buffer overflow

Buffer overflow in the lbsprocessbss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beacon/probe response."...

10CVSS7AI score0.05261EPSS
SaveExploits1References13Affected Software1
Tenable Nessus
Tenable Nessus
added 2007/11/08 12:0 a.m.31 views

GLSA-200711-09 : MadWifi: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200711-09 MadWifi: Denial of Service Clemens Kolbitsch and Sylvester Keil reported an error when processing beacon frames with an overly large 'length' value in the 'xrates' element. Impact : A remote attacker could act as an acce...

4.3CVSS5.6AI score0.01968EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2007/10/15 12:0 a.m.56 views

SEC Consult SA-20071012-0 :: Madwifi xrates element remote DOS

SEC Consult Security Advisory 20071012-0 =================================================================================== title: Madwifi xrates element remote DOS program: Madwifi linux wlan driver for atheros chipsets vulnerable version: Madwifi = 0.9.3.2 homepage: www.madwifi.org found: July...

6.9AI score
SaveExploits0
securityvulns
securityvulns
added 2007/10/15 12:0 a.m.27 views

Linux Madwifi wireless drivers DoS

Assert on oversized "extended supported rates" beacon frame...

3.2AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2007/10/14 6:17 p.m.13 views

CVE-2007-5448

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

4.3CVSS6.4AI score0.01968EPSS
SaveExploits0References13
Prion
Prion
added 2007/10/14 6:17 p.m.15 views

Code injection

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

4.3CVSS6.6AI score0.01968EPSS
SaveExploits0References13Affected Software1
CVE
CVE
added 2007/10/14 6:0 p.m.66 views

CVE-2007-5448

CVE-2007-5448 affects MadWifi 0.9.3.2 and earlier. A remote attacker can trigger a denial of service (kernel panic) by sending a beacon frame with a large length value in the extended supported rates (xrates) element, exploiting code in net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta...

4.3CVSS6.2AI score0.01968EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
added 2007/10/14 6:0 p.m.21 views

CVE-2007-5448

Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service panic via a beacon frame with a large length value in the extended supported rates xrates element, which triggers an assertion error, related to net80211/ieee80211scanap.c and net80211/ieee80211scansta.c...

6.3AI score0.01968EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2007/06/27 12:0 a.m.35 views

Mandrake Linux Security Advisory : madwifi-source (MDKSA-2007:132)

The 802.11 network stack in MadWifi prior to 0.9.3.1 would alloa remote attackers to cause a denial of service system hang via a crafted length field in nested 802.3 Ethernet frames in Fast Frame packets, which results in a NULL pointer dereference CVE-2007-2829. The athbeaconconfig function in...

10CVSS6AI score0.03461EPSS
SaveExploits0References3
NVD
NVD
added 2007/06/05 9:30 p.m.22 views

CVE-2007-0933

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

7.8CVSS7.9AI score0.27501EPSS
SaveExploits0References5
Prion
Prion
added 2007/06/05 9:30 p.m.21 views

Buffer overflow

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

7.8CVSS8.3AI score0.27501EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2007/06/05 9:0 p.m.27 views

CVE-2007-0933

Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ Rev. A1 on Windows XP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a beacon frame with a long TIM Information Element...

7.9AI score0.27501EPSS
SaveExploits0References5
Rows per page
Query Builder