Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

No description provided by source. saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE...

alicetelecom-backdoor.txt

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers - Backdoor from internal LAN/WAN

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN

Telecom Italia Alice Pirelli routers - Backdoor from internal LANWAN saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadco...

Important: kernel security update

CVE-2007-4571 ALSA memory disclosure flaw - Tick divider bugs on x8664 - CVE-2007-5494 openOATOMICLOOKUP leaks dentry - PATCH jbd: wait for already submitted tsyncdatalist buffer to complete Possibility of in-place data destruction - LSPP: audit rule causes kernel 'out of memory' condition and...

openSUSE 10 Security Update : kernel (kernel-4487)

This kernel update fixes the following security problems : - CVE-2007-3105: Stack-based buffer overflow in the random number generator RNG implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up...

CVE-2006-6904

Technical details are not publicly available in the provided documents. Monitor for updates as more information may reveal affected components, impact, or remediation.

CVE-2006-6904

Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...

CVE-2006-6904: Undefined Security Weakness

Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...

CVE-2006-6904

Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access aka Remote Root via unspecified vectors...

CVE-2006-5882

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field...

CVE-2006-5882

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field...

CVE-2006-5882

CVE-2006-5882 describes a stack-based overflow in the Broadcom BCMWL5.SYS wireless device driver (version 3.50.21.10), used by Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products. The vulnerability allows remote attackers within an adjacent network to execute ar...

CVE-2006-5882: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field...

Broadcom无线驱动探测响应超长SSID栈溢出漏洞

Broadcom是全球领先的有线和无线通信半导体公司。 Broadcom的无线驱动程序实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 Broadcom的BCMWL5.SYS无线驱动在处理包含有超长SSID字段的802.11探测响应报文时存在栈溢出漏洞，允许攻击者通过发送恶意报文导致执行任意内核态代码。 Broadcom BCMWL5.SYS 3.50.21.10 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'Broadcom Wireless Driver Probe Response SSID Overflow',...

broadcom_wifi_ssid.rb.txt

require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID 'Broadcom Wireless Driver Probe Response SSID Overflow', 'Description' = %q This module exploits a stack overflow in the Broadcom Wireless driver that allows remote code execution in kernel mode by sending a 802.11...

Broadcom wireless driver fails to properly process 802.11 probe response frames

Overview A buffer overflow vulnerability exists in the Broadcom BCMWL5.SYS wireless driver. Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code, or cause a denial-of-service condition. Description The BCMWL5.SYS driver is a wireless 802.11 device driver...

[SA22831] Broadcom Wireless Driver Probe Response SSID Buffer Overflow

---------------------------------------------------------------------- To improve our services to our customers, we have made a number of additions to the Secunia Advisories and have started translating the advisories to German. The improvements will help our customers to get a better understandi...