CVE-2009-2319

The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-2319

The CVE-2009-2319 entry concerns the Axesstel MV 410R Wi‑Fi component. The vulnerability stems from the default configuration which does not use encryption, enabling remote attackers to sniff network traffic and potentially obtain sensitive information. No further technical details (affected firm...

Axesstel MV 410R Bypass / XSS

Multiple Flaws in Axesstel MV 410R by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Axesstel MV 410R is a device offered by the two leading polish telecom operators Orange and Polish Telecom to provide broadband Internet in CDMA technology and it's already widely in use...

CVE-2009-2273

The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

Default configuration

The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-2273

The CVE-2009-2273 entry describes a vulnerability in the Huawei D100 where the default Wi‑Fi configuration does not use encryption. This enables remote attackers to sniff the network and obtain sensitive information. The affected component is the Wi‑Fi portion of the Huawei D100; the root cause i...

CVE-2009-2273

The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

Multiple Flaws in Huawei D100

Multiple Flaws in Huawei D100 by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Huawei D100 is a device offered by the polish telecom operator - Play, to provide broadband Internet in CDMA technology and it's already widely in use. Overview: Huawei D100 firmware and its defau...

Apple iPhone security standards released

From Information Week George Hulme Today the Center for Internet Security released a set of benchmarks designed to help consumers and businesses alike communicate using their favorite toy. Whoops, I meant smartphone. The guidance is worth a look. My biggest personal iPhone security related gaffe:...

Still no fix for TCP DoS weakness

Software vendors and security officials in several countries have been working for nearly six months on a fix for a serious flaw in a number of TCP implementations that caused a lot of controversy and speculation last fall. The problem could allow attackers to consume all of the resources on a...

The use of the hamster hijacking Gmail(sidejacking)-vulnerability warning-the black bar safety net

4 month released, the software DESCRIPTION is tempting: "The black hat of the General Assembly after the outgoing of a tool to Ferret it. The author claims that you can use him to intercept mail login process the cookie information. Then you can feel free to invade the others mailbox. Worked at t...

Design/Logic Flaw

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

CVE-2008-5230

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

CVE-2008-5230

The CVE-2008-5230 entry covers a TKIP vulnerability in WPA/WPA2 implementations (notably Cisco and other vendors). The root cause is insufficient countermeasures against crafted and replayed packets, enabling a remote attacker to decrypt AP→client traffic, spoof AP→client packets, and perform ARP...

CVE-2008-5230

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

CVE-2008-4441

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service reboot or hang-up via a malformed...

CVE-2008-4441

Summary: CVE-2008-4441 affects Linksys WAP4400N (firmware 1.2.14) with Marvell 88W8361P‑BEM1. When in WEP mode, the Marvell wireless driver fails to parse certain malformed 802.11 frames, enabling a remote attacker to cause a denial of service (reboot or hang) by sending a malformed association r...

CVE-2008-4441

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service reboot or hang-up via a malformed...

Marvell Driver Malformed Association Request Vulnerability

Title: ------ Marvell Driver Malformed Association Request Vulnerability Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse some malformed 802.11 frames. Assigned CVE: ------------- CVE-2008-4441 Details: -------- T...

Nokia e90 phone Wi-Fi DoS

Device crash on malformed Wi-Fi frame...