Code injection

The cat6000-dot1x component in Cisco IOS 12.2 before 12.233SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service traffic storm via unspecified vectors that trigger many unicast EAPoL Protocol Data Units PDU...

CVE-2010-2983

The workgroup bridge aka WGB functionality in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service dropped connection via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374...

Code injection

The workgroup bridge aka WGB functionality in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service dropped connection via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374...

CVE-2010-2983

The workgroup bridge aka WGB functionality in Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to cause a denial of service dropped connection via a series of spoofed EAPoL-Logoff frames, related to an "EAPoL logoff attack," aka Bug ID CSCte43374...

CVE-2010-2983

The CVE-2010-2983 issue affects Cisco Unified Wireless Network (UWN) Solution 7.x, where the workgroup bridge (WGB) functionality allows remote attackers to cause a denial of service (dropped connection) by sending a sequence of spoofed EAPoL-Logoff frames. Root cause is tied to an EAPoL logoff a...

Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow (PoC)

Aircrack-NG Tools svn r1675 - Remote Heap Buffer Overflow PoC !/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675. The tools' code responsible for parsing IEEE802.11-packets assumes the self-proclaimed length of a EAPOL-packet to be...

Aircrack-NG Tools svn r1675 Remote Exploit

Exploit for multiple platform in category dos / poc ========================================== Aircrack-NG Tools svn r1675 Remote Exploit ========================================== !/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675...

Remote Exploit Against the Aircrack-NG Tools svn r1675

No description provided by source. !/usr/bin/env python -- coding: UTF-8 -- ''' A remote-exploit against the aircrack-ng tools. Tested up to svn r1675. The tools' code responsible for parsing IEEE802.11-packets assumes the self-proclaimed length of a EAPOL-packet to be correct and never to exceed...

aircrack-ng buffer overflow

Buffer overflow on IEEE 802.11 EAPOL parsing...

NETGEAR WN802T Wireless Access Point EAPoL密钥长度拒绝服务漏洞

BUGTRAQ ID: 31013 CVE ID：CVE-2008-1144 CNCVE ID：CNCVE-20081144 NETGEAR WN802T Wireless Access Point是一款无线路由接入点。 NETGEAR WN802T Wireless Access Point不正确处理EAPoL报文中的超长密钥长度，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 发送特殊构建的EAPoL报文可触发此漏洞，不过只有通过802.11验证后才能利用无线访问接入点的"Open"模式配置和成功关联恰当的安全参数如WPA w/ TKIP unicast, TKIP multicas...

Marvell Driver EAPoL-Key Length Overflow

Title: ------ Marvell Driver EAPoL-Key Length Overflow Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse malformed EAPoL-Key packets. This packet is used for unicast/multicast key derivation which are called 4-way...

Code injection

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse EAPoL-Key packets, which allows remote authenticated users to cause a denial of service device reboot or hang or possibly execute arbitrary code via a...

CVE-2008-1144

CVE-2008-1144 affects the Netgear WN802T Wi‑Fi AP with Marvell 88W8361P‑BEM1, where the Marvell driver mishandles EAPoL‑Key packets. A crafted EAPoL‑Key with an advertised length can be used by remote authenticated users to cause a denial of service (device reboot or hang) and may enable arbitrar...

CVE-2008-1144

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse EAPoL-Key packets, which allows remote authenticated users to cause a denial of service device reboot or hang or possibly execute arbitrary code via a...

[SA19966] Hostapd EAPoL Frame Handling Denial of Service

TITLE: Hostapd EAPoL Frame Handling Denial of Service SECUNIA ADVISORY ID: SA19966 VERIFY ADVISORY: http://secunia.com/advisories/19966/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: Hostapd 0.x http://secunia.com/product/9736/ DESCRIPTION: Matteo Rosi has reported a...

Hostaupd IEEE 802.11 authentication daemon DoS

DoS on invalid EAPoL frame...

Design/Logic Flaw

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

Hostapd 0.3.7-2 allows remote attackers to cause a denial of service segmentation fault via an unspecified value in the keydatalength field of an EAPoL frame...

CVE-2006-2213

CVE-2006-2213 affects Hostapd 0.3.7-2. The issue arises from insufficient input validation on a key length value in EAPoL frames (key_data_length), which can be exploited remotely to crash the service (segmentation fault) and cause a denial of service. Debian/Mandriva/SUSE advisories confirm a mi...