Marvell Driver Null SSID Association Request Vulnerability

Title: ------ Marvell Driver Null SSID Association Request Vulnerability Summary: ------ The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse SSID information element included in association requests. Most information elements are used b...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

Cross site request forgery (csrf)

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

Cross site request forgery (csrf)

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2008-1144

CVE-2008-1144 affects the Netgear WN802T Wi‑Fi AP with Marvell 88W8361P‑BEM1, where the Marvell driver mishandles EAPoL‑Key packets. A crafted EAPoL‑Key with an advertised length can be used by remote authenticated users to cause a denial of service (device reboot or hang) and may enable arbitrar...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

CVE-2007-5474

CVE-2007-5474 affects Linksys WRT350N (firmware 2.00.17) using Atheros AR5416-AC1E. The vulnerability arises from incorrect parsing of the Atheros vendor-specific information element in an association request, allowing a too-long information element to cause a denial of service (device reboot or ...

CVE-2008-1197

CVE-2008-1197 affects Netgear WN802T (firmware 1.3.16) using Marvell 88W8361P-BEM1. The driver fails to correctly parse the SSID information element in an association request, enabling remote authenticated users to trigger a denial of service (device reboot/hang) and potentially execute arbitrary...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

NetBSD malformed ICMPv6 MLD-QUERY denial of service

Overview NetBSD fails to properly handle ICMPv6 MLD query packets, which can allow a remote, unauthenticated attacker to cause a denial of service. Description ICMPv6, which is defined in RFC 4443, is a version of the ICMP protocol for IPv6. Multicast Listener Discovery MLD for IPv6, which is...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

CERT-FI Vulnerability Advisory on OpenSSL

CERT-FI Vulnerability Advisory on OpenSSL Version Information Advisory Reference FICORA 130450 Release Date 28 May 2008 10:30 UTC Last Revision 28 May 2008 Version Number 1.1 Acknowledgement Vulnerabilities were discovered by Ossi Herrala and Jukka Taimisto from the CROSS project at Codenomicon...

BT Home Hub管理员口令泄露漏洞

BUGTRAQ ID: 29387 BT Home Hub是家用的无线Internet路由器。 BT Home Hub的最新固件版本添加了一个新的安全功能，允许将默认的管理员口令从admin更改为路由器的序列号，但只要向路由器所在的网络发送MDAP多播请求就可以得到Home Hub的序列号。 如果要利用这个漏洞，攻击者必须通过ethernet或Wi-Fi加入到Home Hub所在的LAN。有两种方式可以入侵到BT Home Hub Wi-Fi网络： - arp回放注入和弱IV破解 - 通过SSID暴力猜测Home Hub的默认WEP密钥列表 British...

Creative Software AutoUpdate Engine ActiveX Stack Overflow Exploit

No description provided by source. html !-- !!!NOT PRIVATE PLEASE DISTRIBUTE!!! Zer0Day Creative Software AutoUpdate Engine ActiveX Stack-Overflow CacheFolder Exploit by BitKrush BitKrush +A.T.+ G.M.A.I.L.D.0.T.C.0.M. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CacheFolder...

GnuTLS Server Name extension Denial of Service

Overview A vulnerability exists in GnuTLS that may allow a remote attacker to cause a denial of service. Description GnuTLS contains a vulnerability in gnults-serv that may result in a denial of service when handling a specially crafted Client Hello message. According to CERT-FI Vulnerability...

MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub

http://www.gnucitizen.org/blog/dumping-the-admin-password-of-the-bt-home-hub/ We're back with more security attacks against the BT Home Hub most popular wireless DSL router in the UK! BT added a new security feature on the latest version 1 of the BT Home Hub firmware 6.2.6.E at time of writing...

CERT-FI Vulnerability Advisory on GnuTLS

CERT-FI Vulnerability Advisory on GnuTLS Version Information Advisory Reference FICORA 130447 Release Date 19 May 2008 12:00 UTC Last Revision 19 May 2008 Version Number 1.0 Acknowledgement Vulnerabilities were discovered by Ossi Herrala and Jukka Taimisto from the CROSS project at Codenomicon...

libarchive does not properly terminate loop

Overview libarchive contains a vulnerability that may allow an attacker to cause a denial of service. Description The libarchive library provides an interface for reading and writing archive files.There is a vulnerability in libarchive that occurs when it parses the pax interchange format. If an...

CVE-2008-1269

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...