[SECURITY] [DSA 3233-1] wpa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3233-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 24, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3233-1 (wpa - security update)

The Google security team and the smart hardware research group of Alibaba security team discovered a flaw in how wpasupplicant used SSID information when creating or updating P2P peer entries. A remote attacker can use this flaw to cause wpasupplicant to crash, expose memory contents, and...

wpa_supplicant P2P SSID Handling Vulnerability

wpasupplicant is a set of daemons that run in the background to support WEP, WPA/WPA2 and WAPI wireless protocols and encrypted authentication. A buffer overflow vulnerability exists in the wpasupplicant 'p2padddevice' function src/p2p/p2p.c, which allows an attacker to submit a specially crafted...

Android WiFi Management Component wpa_supplicant presence of high-risk vulnerabilities that can lead to leaked memory information, DoS, denial of service or arbitrary code execution-vulnerability warning-the black bar safety net

Popular WLAN Wireless Network Management Component cwpasupplicant exposed high-risk vulnerabilities CVE-2 0 1 5-1 8 6 3, and can lead to leaked memory information, DoS, denial of service or arbitrary code execution. cwpasupplicant in Android, Linux, BSD, Mac OS X, Windows and some otheroperating...

DSA-3233-1 wpa - security update

Bulletin has no description...

wpa_supplicant: arbitrary code execution

A vulnerability was found in how wpasupplicant uses SSID information parsed from management frames that create or update P2P peer entries e.g., Probe Response frame or number of P2P Public Action frames. SSID field has valid length range of 0-32 octets. However, it is transmitted in an element th...

Ubuntu: Security Advisory (USN-2577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2577-1: wpa_supplicant vulnerability

It was discovered that wpasupplicant incorrectly handled SSID information when creating or updating P2P peer entries. A remote attacker could use this issue to cause wpasupplicant to crash, resulting in a denial of service, expose memory contents, or possibly execute arbitrary code...

UBUNTU-CVE-2015-1863

Heap-based buffer overflow in wpasupplicant 1.0 through 2.4 allows remote attackers to cause a denial of service crash, read memory, or possibly execute arbitrary code via crafted SSID information in a management frame when creating or updating P2P entries...

wpa_supplicant -- P2P SSID processing vulnerability

Jouni Malinen reports: A vulnerability was found in how wpasupplicant uses SSID information parsed from management frames that create or update P2P peer entries e.g., Probe Response frame or number of P2P Public Action frames. SSID field has valid length range of 0-32 octets. However, it is...

SUSE-SU-2015:1013-1 Security update for wpa_supplicant

wpasupplicant was updated to fix three security issues: - CVE-2015-0210: wpasupplicant: broken certificate subject check this adds the 'domainmatch' config option from upstream additional to the already existing domainsuffixmatch - CVE-2014-3686: hostapd command execution - CVE-2015-1863: P2P SSI...

Windows 10 to deliver updates and App downloads via Peer-to-Peer Technology

Does downloading Windows updates from Microsoft's servers and waiting too long really annoy you? It might not be with the arrival of Windows 10. Microsoft seems to make a major change in Windows 10 to the way it delivers updates for the software. The leaked version of Windows 10 build 10036 the...

帝友P2P任意密码支付密码重置让我超越马云爸爸不再是梦想

简要描述： 本屌为穷逼，买不起贵司10+W的而且代码质量高到可怕的产品，所以下了一个D版系统看源码。在网贷之家随机挑了几个站点测试，发现问题都存在…… 详细说明： 听说P2P借贷火成狗，然后看了看几家P2P借贷的站点，长得都差不多，看起来好像就是一个妈生的。本来想吐槽一下，关乎钱的事情，就不能认真点吗？但是，转念一想，艾玛，这不是一个通用程序么……赶紧脱掉裤子爽一发。 听说这货的产品卖得死贵（15W），翻阅了一下写的代码，质量实在对不起这个价格。之前在乌云上厂商还会接点bug打发打发白帽，现在听说弄了个绿M的检测报告之后屌都不屌乌云一下。 扯蛋完毕，本屌是小白一个，还请各位看官海涵。...

MegaNet — New Decentralized, Non-IP Based and Encrypted Network

The Famous Internet entrepreneur and former hacker Kim Dotcom, who introduced legendary Megaupload and MEGA file sharing services to the World, has came up with another crazy idea — To start his very own Internet that uses the "blockchain". Just last month, Kim Dotcom, a German millionaire former...

Android WiFi-Direct - Denial of Service

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Android WiFi-Direct Denial of Service 1. Advisory Information Title: Android WiFi-Direct Denial of Service Advisory ID: CORE-2015-0002 Advisory URL: http://www.coresecurity.com/advisories/android-wifi-direct-denial-service Date...

帝友p2p新业务目录遍历

简要描述： 我本来在找葫芦娃动画片的，谁知道你们的广告弹出来了，没办法。 详细说明： 0x00 说明 帝友p2p（http://www.dyp2p.com）的新业务，帝友云（http://www.diyou.cn） 0x01 思路 一般新业务上线，都会有些许遗漏的地方。假如是加急上线，那么更容易粗心了，这也是人之常情。 所以看到帝友有新的业务上线，我赶紧来瞅瞅我水平不高，只能找这些篓子。 虽说官方搞了个什么口令，大门上了道锁，但是菊花难免不保的时候啊。 0x02 套路 我一般都是按照套路出牌的一边上扫描器，一边人工找篓子。 这不，有了防火墙，忒凶。扫描器都范二了...

Gather Kademlia Server Information

This module uses the Kademlia BOOTSTRAP and PING messages to identify and extract information from Kademlia speaking UDP endpoints, typically belonging to eMule/eDonkey/BitTorrent servers or other P2P applications. This module requires Metasploit: https://metasploit.com/download Current source:...

MLDonkey - multi-protocol P2P file sharing application

MLDonkey is a multi-platform and freely distributed eDonkey client, a P2P Peer-to-Peer file-sharing application. It provides users with both a server daemon and graphical user interface GUI. It seems to be the first ever open source application that could access the eDonkey peer-to-peer file...

iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit

No description provided by source. !-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com iMesh is a file sharing and online social network. It uses a proprietary,...

Working Resources BadBlue 1.7 EXT.DLL Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5086/info BadBlue is a P2P file sharing application distributed by Working Resources. The ext.dll ISAPI does not sufficiently sanitize input. Because of this, it is possible for a user to create a custom URL containing...