CVE-2011-1591

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file...

DEBIAN-CVE-2011-1591

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file...

Immunity Canvas: WIRESHARK_DECT

Name| wiresharkdect ---|--- CVE| CVE-2011-1591 Exploit Pack| CANVAS Description| Wireshark DECT Dissector Remote Overflow Notes| CVE Name: CVE-2011-1591 Notes: Tested on Wireshark 1.4.4 on WinXP CVE Url: https://vulners.com/cve/CVE-2011-1591...

Stack overflow

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file...

CVE-2011-1591

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file...

CVE-2011-1591

CVE-2011-1591 : Wireshark 1.4.x contains a stack-based buffer overflow in the DECT dissector (epan/dissectors/packet-dect.c). A crafted .pcap enables remote code execution. Affected version range is Wireshark 1.4.x prior to 1.4.5; exploitation involves processing a malformed packet trace file. Mi...

CVE-2011-1591

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file...

PT-2011-3242

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.0 through 1.4.4 Description A stack-based buffer overflow issue exists in the DECT dissector component of Wireshark, which can be exploited by remote attackers through a crafted .pcap file, potentially allowing the...

Wireshark < 1.2.16 / 1.4.5 Multiple Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.16 or 1.4.x less than 1.4.5. Such versions are affected by the following vulnerabilities : - A data type mismatch error exists in the function 'dissectnfsclientaddr4' in the file 'packet-nfs.c' of the NFS dissector and could lead to...

Wireshark DECT dissector vulnerability

Overview Wireshark's DECT dissector contains a remote code execution vulnerability in the context of the user running a packet capture or reading a packet capture file. Description Paul Makowski's report states:/epan/dissectors/packet-dect.c contains a stack-based buffer overflow via a call to...

DECT标准密码加密绕过漏洞

Bugraq ID: 38152 DECT是数字增强型无线通讯标准。 DECT标准密码DSC加密标准存在加密绕过问题，允许攻击者恢复密钥。 攻击者可以利用漏洞破解DSC加密算法，然后读取无线设备发送到基站的加密数据，允许攻击者获得敏感信息。 针对DECT标准密码的分析将在FSE2010会议上演讲。总的来说可以在PC上在几分钟内恢复DSC的密钥，但是需要几小时获取足够多的密钥流。 DECT Forum DECT 目前没有解决方案提供： http://www.dect.org/index.aspx...

DECT cordless telephone security test-use-vulnerability warning-the black bar safety net

Disclaimer: This article tests the use of the DECT phone are has himself, strongly opposed any who used to be discord, or even break the law.! Just use the "hack DECT cordless phone" as keyword Google the following. Found this 2 articles: hack crack DECT cordless telephone security system...

DECT Call Scanner

This module scans for active DECT calls This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DECT Call Scanner', 'Description' = 'This module scans for active DECT calls', 'Author' = 'DK ' , 'Licens...

DECT Base Station Scanner

This module scans for DECT base stations This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'DECT Base Station Scanner', 'Description' = 'This module scans for DECT base stations', 'Author' = 'DK '...

DECT cordless telephone security test-use-vulnerability warning-the black bar safety net

Disclaimer: This article tests the use of the DECT phone are has himself, strongly opposed any who used to be discord, or even break the law.! Just use the "hack DECT cordless phone" as keyword Google the following. Found this 2 articles: hack crack DECT cordless telephone security system...

CVE-2008-4874

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

CVE-2008-4875

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

CVE-2008-4876

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Design/Logic Flaw

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...