EUVD-2013-4121

Malware in sbrugna...

EUVD-2013-4123

Malware in sbrugna...

EUVD-2013-4122

Malware in sbrugna...

CVE-2013-4218

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicantkey.pem on all systems, which allows local user...

CVE-2013-4217

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...

CVE-2013-4216

The TraceOpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users ...

Design/Logic Flaw

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicantkey.pem on all systems, which allows local user...

Design/Logic Flaw

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...

CVE-2013-4217

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...

PT-2013-4904

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions prior to 1.5.3 Description The issue concerns the Trace OpenLogFile function in the Trace module, which uses world-writable permissions for the wimaxd.log file. This allows local users to cause a denial of...

PT-2013-4907

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2 Description The issue is caused by multiple integer overflows that can lead to a denial of service or possibly allow the execution of arbitrary code. This can be triggered by a crafted PDU val...

PT-2013-4905

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2 Description The issue allows local users to obtain sensitive information by reading a log file due to the logging of a cleartext password during certain attempts to set a password by the OSAL...

PT-2013-4906

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions prior to 1.5.3 Description The issue concerns the InitMethodAndPassword function in the Intel WiMAX Network Service, which uses the same RSA private key in supplicant key.pem on all systems. This allows loc...

CVE-2013-4218: Undefined Security Weakness

The InitMethodAndPassword function in InfraStack/OSAgnostic/WiMax/Agents/Supplicant/Source/SupplicantAgent.c in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses the same RSA private key in supplicantkey.pem on all systems, which allows local user...

CVE-2013-4216: Undefined Security Weakness

The TraceOpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c in the Trace module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices uses world-writable permissions for wimaxd.log, which allows local users ...

CVE-2013-4219: Undefined Security Weakness

Multiple integer overflows in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices allow remote attackers to cause a denial of service component crash or possibly execute arbitrary code via an L5 connection with a crafted PDU value that triggers a...

CVE-2013-4217: Undefined Security Weakness

The OSALCryptSetEncryptedPassword function in InfraStack/OSDependent/Linux/OSAL/Services/wimaxosalcryptservices.c in the OSAL crypt module in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices logs a cleartext password during certain attempts to set a...