Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP Denial of Service // // Cisco Killer - ciskill.c // // Usage: ./ciskill device // // Author: Pasv pasvninja at gmail.com // // Credit: This exploit takes advantage of a vulnerability that was // discovered by Eric Smith on January 12,...

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)

// // Cisco Killer - ciskill.c // // Usage: ./ciskill device // // Author: Pasv pasvninja at gmail.com // // Credit: This exploit takes advantage of a vulnerability that was // discovered by Eric Smith on January 12, 2006 bid:16217 // // Greets to NW, zimmy, GSO, and the rest. // // Description:...

CVE-2006-0354

Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points WAP allows remote authenticated users to cause a denial of service termination of packet passing or termination of client connections by sending the management interface a large number of spoofed ARP packets, which creates a large ARP...

Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)

Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...

Cisco Aironet wireless access points DoS

arp-requests flood from wireless interface leads to memory exhaustion...

CVE-2005-3253

Wireless Access Points AP for 1 Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and 2 Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass...

CVE-2005-3253

The CVE-2005-3253 entry documents a flaw in Wireless Access Points where a static WEP key of “12345” is used, enabling remote authentication bypass. Affected products include Avaya AP-3 through AP-6 (2.5–2.5.4), AP-7/AP-8 before 3.1, Proxim AP-600/AP-2000 before 2.5.5, and Proxim AP-700/AP-4000 a...

CVE-2005-3253

Wireless Access Points AP for 1 Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and 2 Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass...

[SA18047] Avaya Wireless Access Points Static WEP Key Authentication Bypass

TITLE: Avaya Wireless Access Points Static WEP Key Authentication Bypass SECUNIA ADVISORY ID: SA18047 VERIFY ADVISORY: http://secunia.com/advisories/18047/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Avaya Wireless Access Points AP 3-6 2.x...

The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net

General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...

FUSE: mtab corruption through fusermount

Background FUSE Filesystem in Userspace allows implementation of a fully functional filesystem in a userspace program. The fusermount utility is used to mount/unmount FUSE file systems. Description Thomas Biege discovered that fusermount fails to securely handle special characters specified in...

CVE-2002-2137

CVE-2002-2137 affects GlobalSunTech Wireless Access Points (including WISECOM GL2422AP-0T) and certain OEMs (D-Link DWL-900AP+ B1 2.1/2.2, ALLOY GL-2422AP-S, EUSSO GL2422-AP, LINKSYS WAP11-V2.2). The issue allows remote attackers to obtain sensitive information (WEP keys, administrator password, ...

CVE-2002-2137

GlobalSunTech Wireless Access Points 1 WISECOM GL2422AP-0T, and possibly OEM products such as 2 D-Link DWL-900AP+ B1 2.1 and 2.2, 3 ALLOY GL-2422AP-S, 4 EUSSO GL2422-AP, and 5 LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the administrator password, and...

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...

CVE-2005-3482

Affected devices are Cisco 1200, 1131, and 1240 series Access Points operating in LWAPP mode and controlled by 2000/4400 series Airespace controllers running 3.1.59.24. The vulnerability allows remote attackers to send unencrypted traffic to a secure network by using frames with the MAC address o...

Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access Document ID: 68034 Revision 1.0 For Public Release 2005 November 02 1500 UTC GMT -...

Unauthorized Linksys wireless access points access

Clients without WPA Personal/TKIP authentication can access device with authentication enabled...

Fedora Core 4 : NetworkManager-0.4-20.FC4.1 (2005-680)

Network Manager passes logging messages straight to syslog as the format string. This causes it to crash when connecting to access points that contain format string characters. This was reported initially by Ian Jackson : http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196. html...

CVE-2005-0569

Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 language parameter to register.php, 2 change email feature in profile.php, 3 posts or 4 topics parameter to moderate.php...