CVE-2015-4144

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service crash via a crafted message...

CVE-2015-4146

The EAP-pwd peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not clear the L Length and M More flags before determining if a response should be fragmented, which allows remote attackers to cause a denial of service crash via a crafted message...

CVE-2015-4145

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate a fragment is already being processed, which allows remote attackers to cause a denial of service memory leak via a crafted message...

PT-2015-6431

Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant versions 1.0 through 2.4 Description The issue concerns the EAP-pwd server and peer implementation, which fails to validate if a fragment is already being processed. This allows remote attackers to cause a denial of...

PT-2015-6432

Name of the Vulnerable Software and Affected Versions hostapd and wpa supplicant versions 1.0 through 2.4 Description The issue concerns the EAP-pwd peer implementation in hostapd and wpa supplicant, where the L Length and M More flags are not cleared before determining if a response should be...

UBUNTU-CVE-2015-4144

The EAP-pwd server and peer implementation in hostapd and wpasupplicant 1.0 through 2.4 does not validate that a message is long enough to contain the Total-Length field, which allows remote attackers to cause a denial of service crash via a crafted message...

Attachmate Reflection FTP Client PWD Command Buffer Overflow (CVE-2014-5211)

A stack-based buffer overflow vulnerability exists in Attachmate Reflection FTP Client. The vulnerability is caused by insufficient boundary checking while processing PWD command responses. An attacker could exploit this vulnerability by enticing a user to access an FTP server that sends speciall...

hostapd and wpa_supplicant -- multiple vulnerabilities

Jouni Malinen reports: WPS UPnP vulnerability with HTTP chunked transfer encoding. 2015-2 - CVE-2015-4141 Integer underflow in AP mode WMM Action frame processing. 2015-3 - CVE-2015-4142 EAP-pwd missing payload length validation. 2015-4 - CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146...

freeradius3 -- insufficient validation on packets

Jouni Malinen reports: The EAP-PWD module performed insufficient validation on packets received from an EAP peer. This module is not enabled in the default configuration. Administrators must manually enable it for their server to be vulnerable. Only versions 3.0 up to 3.0.8 are affected...

Stack overflow

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

CVE-2014-5211

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

CVE-2014-5211

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

CVE-2014-5211: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response...

PT-2015-3788

Name of the Vulnerable Software and Affected Versions Attachmate Reflection FTP Client versions prior to 14.1.433 Description The issue is related to a stack-based buffer overflow that can be triggered by a large PWD response from a remote FTP server, allowing the execution of arbitrary code...

Attachmate Reflection FTP Client Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Attachmate Reflection FTP client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw manifests whi...

CVE-2013-0336

The ipapwdchpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipapwdextop.c in the directory server dirsrv in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service crash via a connection request without a username/dn, related to the 389 directory server...

PT-2014-2609

Name of the Vulnerable Software and Affected Versions TP-LINK WR1043N router with firmware TL-WR1043ND V1 120405 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This includes enabling FTP access to /tmp via the shareEntire paramet...

CVE-2012-6316: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the 1 username or 2 pwd parameter to userRpm/NoipDdnsRpm.htm...

PT-2014-2381

Name of the Vulnerable Software and Affected Versions TP-LINK TL-WR841N router versions 3.13.9 Build 120201 Rel.54965n and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote administrators to inject arbitrary web script or...

Pligg 2.0.1 - Multiple Vulnerabilities

Pligg versions 2.0.1 and below suffer from remote SQL injection, path disclosure, and remote command execution vulnerabilities. !/usr/bin/python Exploit Title: Pligg useremail; 62. $subject = $mainsmarty-getconfigvars"PLIGGVisualName".' '.$mainsmarty-getconfigvars"PLIGGPassEmailSubject"; 63. 64...