DefenseCode Security Advisory: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability

DefenseCode Security Advisory http://www.defensecode.com/ Broadcom UPnP Remote Preauth Root Code Execution Vulnerability Advisory ID: DC-2013-01-003 Advisory Title: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability Advisory URL: http://www.defensecode.com/subcategory/advisories-28...

Remote Root access vulnerability in Routers with Broadcom chipsets

DefenseCode researchers have discovered a critical security vulnerability that allows remote unauthenticated attacker to remotely execute arbitrary code under root privileges in the UPnP Universal Plug and Play implementation developed by Broadcom and used by many routers with Broadcom chipsets...

Remote Root access vulnerability in Routers with Broadcom chipsets

DefenseCode researchers have discovered a critical security vulnerability that allows remote unauthenticated attacker to remotely execute arbitrary code under root privileges in the UPnP Universal Plug and Play implementation developed by Broadcom and used by many routers with Broadcom chipsets...

Broadcom UPnP Remote Preauth Root Code Execution

DefenseCode Security Advisory http://www.defensecode.com/ Broadcom UPnP Remote Preauth Root Code Execution Vulnerability Advisory ID: DC-2013-01-003 Advisory Title: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability Advisory URL: http://www.defensecode.com/subcategory/advisories-28...

RHEL 4 : kernel (RHSA-2009:1077)

Updated kernel packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the cor...

Symantec Messaging Gateway Detection (HTTP)

HTTP based detection of Symantec Messaging Gateway. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Broadcom BCM4325 / BCM4329 Devices - Denial of Service

Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid Incredible Samsung Spica Acer Liquid Motorol...

Broadcom BCM4325 BCM4329 Devices - Denial of Service

Broadcom BCM4325 BCM4329 Devices - Denial of Service Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 H...

Broadcom DoS on BCM4325 and BCM4329 Devices

Exploit for hardware platform in category dos / poc Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HT...

CVE-2012-2619

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service out-of-bounds read and Wi-Fi outage via an RSN 802.11i information element...

Out-of-bounds

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service out-of-bounds read and Wi-Fi outage via an RSN 802.11i information element...

CVE-2012-2619

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service out-of-bounds read and Wi-Fi outage via an RSN 802.11i information element...

CVE-2012-2619

The CVE-2012-2619 entry concerns a flaw in Broadcom BCM4325/ BCM4329 Wi‑Fi firmware that handles 802.11i information elements. An out-of-bounds read could be triggered by a remote attacker on the same Wi‑Fi network, potentially causing a Wi‑Fi outage or device instability. Apple TV advisories cor...

CVE-2012-2619

The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in certain Acer, Apple, Asus, Ford, HTC, Kyocera, LG, Malata, Motorola, Nokia, Pantech, Samsung, and Sony products, allow remote attackers to cause a denial of service out-of-bounds read and Wi-Fi outage via an RSN 802.11i information element...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Patch Available for Broadcom Mobile Device Firmware DoS Vulnerability

Older versions of Broadcom firmware found in a number of mobile devices from major vendors including the Apple iPhone, iPad, Samsung Galaxy S and HTC Droid Incredible are vulnerable to a denial of service attack. Researchers Andres Blanco and Matias Eissler of Core Security Technologies reported...

Smartphone wireless chipset vulnerable to DoS attack

Security researcher Andres Blanco from CoreSecurity discovered a serious vulnerability in two Wireless Broadcom chipsets used in Smartphones. Broadcom Corporation, a global innovation leader in semiconductor solutions for wired and wireless communications. Broadcom BCM4325 and BCM4329 wireless...

Broadcom DoS on BCM4325 and BCM4329 devices

1. Advisory Information Title: Broadcom DoS on BCM4325 and BCM4329 devices Advisory ID: CORE-2012-0718 Advisory URL: http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 Date published: 2012-10-23 Date of last update: 2012-10-23 Vendors contacted: Broadcom Corporation...

The Tale of One Thousand and One DSL Modems

This is the description of an attack happening in Brazil since 2011 using 1 firmware vulnerability, 2 malicious scripts and 40 malicious DNS servers, which affected 6 hardware manufacturers, resulting in millions of Brazilian internet users falling victim to a sustained and silent mass attack on...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - several flaws were found in the way the Linux kernel CIFS implementation handles Unicode strings. CIFS clients convert Unicode strings sent by a server to their local character sets, and then write those strings into memory. If a malicious server sent a long enough string, it...