Microsoft Security Bulletin MS09-049 - Critical Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)

Microsoft Security Bulletin MS09-049 - Critical Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution 970710 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Wireless L...

CVE-2009-1132

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...

CVE-2009-1132

Heap-based buffer overflow in the Wireless LAN AutoConfig Service aka Wlansvc in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a malformed wireless frame, aka "Wireless Frame Parsing Remote Code Execution Vulnerabilit...

Microsoft Windows Wireless LAN AutoConfig Frame Parsing Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because the Wireless LAN AutoConfig Service fails to properly validate certain network frames. To exploit this issue, an attacker must be within close physical proximity of the affected computer. Attackers can exploit...

MS09-049: Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)

A remote code execution vulnerability exists in the way that the Wireless LAN AutoConfig Service wlansvc parses specific frames received on the wireless network. This vulnerability could allow remote code execution if a client or server with a wireless network interface enabled receives specially...

Code injection

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

CVE-2009-2976

Cisco Aironet Lightweight AP devices transmit certain multicast frames in cleartext, enabling remote attackers who sniff the wireless medium to discover Wireless LAN Controller MAC addresses, IP addresses, and AP configuration details. The connected reports reiterate this behavior without providi...

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Huawei SmartAX MT880 Multiple XSRF Vulnerabilities

Exploit for hardware platform in category remote exploits ================================================== Huawei SmartAX MT880 Multiple XSRF Vulnerabilities ================================================== Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI...

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities

Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has...

Autonomous LAN party <= 0.98.3 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Autonomous LAN party = 0.98.3 Remote File Inclusion Vulnerability ==================================================================...

The LAN ARP spoofing hung it to the way of detailed explanation-vulnerability warning-the black bar safety net

Web page hang Horsethe most difficult is to spread a small website, easy to invade but the access number is not much, harvest the broiler also is not very much. Therefore, a new hang horse way began to pop--LANARP spoofinghung it, as long as the local area network within a machine caught, it can...

Autonomous LAN Party 0.98.3 Remote File Inclusion

============================================================================================================ x Autonomous LAN party = 0.98.3 Remote File Include Vulnerability || ! Download Script : || http://sourceforge.net/projects/alp/files/alp/alp0-98-315oct2006/alp0-98-315oct2006.zip/download...

PT-2009-4388 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user. This is related to a credential...

Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100]

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Huawei MT800 Cross Site Request Forgery

Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...

Update Protection against Cisco IOS Administrative Interface HTTP Authentication

Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...

CVE-2009-1164

The administrative web interface on the Cisco Wireless LAN Controller WLC platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules WiSM, WLC Modules for Integrated Services...