EUVD-2003-0938

Malware in sbrugna...

EUVD-2003-0937

Malware in sbrugna...

IWConfig Local ARGV Command Line Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. / Name: iw-config.c Copyright: !sh2k+!tc...

IWConfig Local ARGV Command Line Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. Exploit: / PSTiwconfig /sbin/iwconfig...

DD-WRT - Site Survey SSID Script Injection

source: https://www.securityfocus.com/bid/30573/info DD-WRT is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied data to the 'Site Survey' section of the administrative web interface. Attackers can exploit this issue to execute arbitrary script code i...

Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)

No description provided by source. // if the iwconfig executable is setuid /str0ke include stdio.h include string.h include unistd.h include stdlib.h / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f" "\x73\x68\x68\x2f\x62\x69\x6e\x89"...

Wireless Tools 26 (IWConfig) - Local Privilege Escalation

Wireless Tools 26 IWConfig - Local Privilege Escalation // if the iwconfig executable is setuid /str0ke include include include include / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 https://www.exploit-db.com/exploits/1169/ / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f"...

ifenslave / iwconfig network device management utilities buffer overflow

Buffer overflow on parsing command lines arguments...

[EXPL] Iwconfig Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...

CVE-2003-0948

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0948

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable...

CVE-2003-0947

The CVE-2003-0947 entry concerns the wireless config tool iwconfig . A vulnerability exists where, if iwconfig is installed with setuid , a buffer overflow can occur via a long OUT environment variable, allowing local arbitrary code execution . The NVD metrics describe a HIGH base score with a LO...

CVE-2003-0948

The CVE-2003-0948 issue concerns a buffer overflow in iwconfig that allows a local attacker to execute arbitrary code by supplying a long HOME environment variable. Affected component: iwconfig (part of wireless-tools on Linux). Root cause: improper handling of an environment variable leads to me...

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...

CVE-2003-0947

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable...

CVE-2003-0948

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable...

Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (2)

Wireless Tools 26 IWConfig - ARGV Local Command Line Buffer Overflow 2 // source: https://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. ...

Wireless Tools 26 (IWConfig) - ARGV Local Command Line Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. / Name: iw-config.c Copyright: !sh2k+!tc2k Author: heka Date: 11/11/200...

iwconfig buffer overflow

Buffer overflow on oversized command line...