CVE-2012-2915

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design .pac file...

Stack overflow

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design .pac file...

CVE-2012-2915

Lattice Semiconductor PAC-Designer is affected by a stack-based buffer overflow in the SymbolicSchematicData/Value field of PAC (.pac) files, allowing remote code execution. Public details indicate the vulnerability exists in PAC-Designer versions around 6.21 (and possibly earlier), triggered by ...

CVE-2012-2915

Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchematicData definition tag in PAC Design .pac file...

zScaler: Resurgent Lethic using Stuxnet Tricks

Newly detected versions of the Lethic botnet are digitally signed using stolen credentials similar to those used by the Stuxnet worm, according to a blog post from Web security firm zScaler. In a blog post Wednesday, zScaler Senior Security Researcher Mike Geide said the company had intercepted n...

This Week In Security: Black Hat, Spammers and Trusted Rootkits

The old saying that there’s nothing new under the sun is just as true in the security industry as it is anywhere else. Many new attacks are variants or tweaks of existing ones, new software fails in exactly the same way as old software and new technologies crop up to solve problems that are 30...

Possible New Rootkit Has Drivers Signed by Realtek

Security researchers have identified a new suspicious program that is copying itself to PCs via USB mass storage devices and is digitally signed with the certificate of Realtek Semiconductor, a major manufacturer of computer products based in Taiwan. The program, known as Stuxnet, looks like a...

Design/Logic Flaw

Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and attack vectors, probably remote...

CVE-2008-4594

Technical details for CVE-2008-4594 are not publicly available in the provided documents. The entries describe an unspecified SNMPv3 vulnerability with unknown impact; monitor for updates from official advisories.

CVE-2008-4594

Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has unknown impact and attack vectors, probably remote...

NETGEAR WN802T Wireless Access Point EAPoL密钥长度拒绝服务漏洞

BUGTRAQ ID: 31013 CVE ID：CVE-2008-1144 CNCVE ID：CNCVE-20081144 NETGEAR WN802T Wireless Access Point是一款无线路由接入点。 NETGEAR WN802T Wireless Access Point不正确处理EAPoL报文中的超长密钥长度，远程攻击者可以利用漏洞对服务进行拒绝服务攻击。 发送特殊构建的EAPoL报文可触发此漏洞，不过只有通过802.11验证后才能利用无线访问接入点的"Open"模式配置和成功关联恰当的安全参数如WPA w/ TKIP unicast, TKIP multicas...

Linux Kernel 2.0.x2.2.x2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure

Linux Kernel 2.0.x2.2.x2.4.x FreeBSD 4.x - Network Device Driver Frame Padding Information Disclosure source: https://www.securityfocus.com/bid/6535/info Network device drivers for several vendors have been reported to disclose potentially sensitive information to attackers. Frames that are small...

CVE-2001-1436

The CVE concerns the Dallas Semiconductor iButton DS1991, where an incorrect password yields predictable values, enabling dictionary attacks by anyone with physical access. Affected: DS1991 device. The issue stems from password handling that allows predictable outputs, impacting confidentiality, ...

CVE-2001-1436

Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password...

Dallas Semiconductor iButton DS1991 vulnerable to dictionary attack

Overview The Dallas Semiconductor iButton DS1991 is vulnerable to a dictionary attack, allowing an intruder to recover passwords. Description The Dallas Semiconductor iButton DS1911 stores 1 kilobyte of data in 3 separate password-protected areas. It includes functionality intended to prevent...