PT-2015-4506

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0 through 8.0.1.3 IBM Business Process Manager BPM versions 8.5.0 through 8.5.0.1 IBM Business Process Manager BPM versions 8.5.5 through 8.5.5.0 Description A cross-site scripting XSS issue exists i...

CVE-2015-0158: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Coach NG framework in IBM Business Process Manager BPM 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

3vilTwinAttacker - Create Rogue Wi-Fi Access Point and Snooping on the Traffic

This tool create an rogue Wi-Fi access point , purporting to provide wireless Internet services, but snooping on the traffic. Software dependencies: Recommended to use Kali linux. Ettercap. Sslstrip. Airbase-ng include in aircrack-ng. DHCP. Nmap. Install DHCP in Debian-based Ubuntu $ sudo apt-get...

Mandriva Linux Security Advisory : aircrack-ng (MDVSA-2015:028)

Updated aircrack-ng package fixes security vulnerabilities : A length parameter inconsistency in Aircrack-ng before 1.2-rc1 at aireplay tcptest which may lead to remote code execution CVE-2014-8322. A missing check for data format in Aircrack-ng before 1.2-rc1 at buddy-ng which may lead to denial...

MGASA-2015-0035 Updated aircrack-ng packages fix security vulnerabilities

Updated aircrack-ng package fixes security vulnerabilities: A length parameter inconsistency in Aircrack-ng before 1.2-rc1 at aireplay tcptest which may lead to remote code execution CVE-2014-8322. A missing check for data format in Aircrack-ng before 1.2-rc1 at buddy-ng which may lead to denial ...

Updated aircrack-ng packages fix security vulnerabilities

Updated aircrack-ng package fixes security vulnerabilities: A length parameter inconsistency in Aircrack-ng before 1.2-rc1 at aireplay tcptest which may lead to remote code execution CVE-2014-8322. A missing check for data format in Aircrack-ng before 1.2-rc1 at buddy-ng which may lead to denial ...

PT-2020-7747

Name of the Vulnerable Software and Affected Versions Aircrack-ng versions prior to 1.2 RC 1 Description The issue is a stack-based buffer overflow in the tcp test function, allowing remote attackers to execute arbitrary code via a crafted length parameter value. Recommendations For versions prio...

PT-2017-6231

Name of the Vulnerable Software and Affected Versions Aircrack-ng versions prior to 1.2 Beta 3 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This is achieved through a response with a crafted length parameter. Recommendations For...

PT-2017-6232

Name of the Vulnerable Software and Affected Versions Aircrack-ng versions prior to 1.2 Beta 3 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault. This is achieved through a response with a crafted length parameter. Recommendations For...

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark3)

The remote Solaris system is missing necessary patches to address security updates : - The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of...

Multiple packages, Multiple vulnerabilities fixed in 2011

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. FMOD Studio PEAR Mail LVM...

GLSA-201411-08 : Aircrack-ng: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201411-08 Aircrack-ng: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in Aircrack-ng. Please review the CVE identifiers referenced below for details. Impact : A local attacker can use this...

Aircrack-ng: User-assisted execution of arbitrary code

Background Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. Description Multiple vulnerabilities have been discovered in Aircrack-ng. Please review the CVE identifiers referenced below for details. Impact A local...

Fedora 20 : aircrack-ng-1.2-0.3.rc1.fc20 (2014-14247)

Security fix for CVE-2014-8321, CVE-2014-8322, CVE-2014-8323, CVE-2014-8324 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora 19 : aircrack-ng-1.2-0.3.rc1.fc19 (2014-14233)

Security fix for CVE-2014-8321, CVE-2014-8322, CVE-2014-8323, CVE-2014-8324 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Fedora Update for aircrack-ng FEDORA-2014-14233

Check the version of aircrack-ng SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868483";...

Fedora Update for aircrack-ng FEDORA-2014-14247

Check the version of aircrack-ng SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868485";...

[SECURITY] Fedora 19 Update: aircrack-ng-1.2-0.3.rc1.fc19

aircrack-ng is a set of tools for auditing wireless networks. It's an enhanced/reborn version of aircrack. It consists of airodump-ng an 802.11 packet capture program, aireplay-ng an 802.11 packet injection program, aircrack static WEP and WPA-PSK cracking, airdecap-ng decrypts WEP/WPA capture...

[SECURITY] Fedora 20 Update: aircrack-ng-1.2-0.3.rc1.fc20

aircrack-ng is a set of tools for auditing wireless networks. It's an enhanced/reborn version of aircrack. It consists of airodump-ng an 802.11 packet capture program, aireplay-ng an 802.11 packet injection program, aircrack static WEP and WPA-PSK cracking, airdecap-ng decrypts WEP/WPA capture...

Aireplay-ng 1.2 beta3 - "tcp_test" Length Parameter Stack Overflow

No description provided by source. / Exploit Title: Aireplay "tcptest" Length Parameter Inconsistency Date: 10/3/2014 Exploit Author: Nick Sampanis Vendor Homepage: http://www.aircrack-ng.org/ Version: Aireplay-ng 1.2 beta3 Tested on: Kali Linux 1.0.9 x64 CVE : CVE-2014-8322 Description: Affected...