Apple AirPort Extreme Base Station AFP请求拒绝服务漏洞

BUGTRAQ ID: 28348 CVECAN ID: CVE-2008-1012 Apple AirPort Extreme Base Station是一款小型的无线接入解决方案。 Apple AirPort Extreme Base Station在处理畸形请求时存在漏洞，如果向设备发送了特制的AFP请求的话，就会导致文件共享变得没有响应。 Apple AirPort Base Station 7.3.1 Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

AirSpan Base Station Distribution Unit default root password

Overview AirSpan Base Station Distribution Units may contain an undocumented telnet server that authenticates via a known password and is enabled by default. Description From the AirSpan MicroMax product page:The base station is highly modular in design and is composed of two main components: the...

Input validation

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...

CVE-2008-1012

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...

CVE-2008-1012

The CVE-2008-1012 issue affects Apple AirPort Extreme Base Station Firmware 7.3.1, where the AFP protocol handler fails input validation on malformed requests. The vulnerability allows remote attackers to trigger a denial of service, causing the file sharing service to hang. Affected component: A...

CVE-2008-1012

Unspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote attackers to cause a denial of service file sharing hang via a crafted AFP request, related to "input validation."...

Authentication flaw

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

CVE-2008-1262

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

CVE-2008-1262

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

Cell Phone Signal hijacking-vulnerability warning-the black bar safety net

Interesting article, this concept has long been proposed, but very few people described so fine. And to be able to implement the“attacker”requirements, high. GSM in the one-way authentication issues in 3G（WCDMA network will be overwritten, since the certification no longer is a 3-tuple, but the...

CVE-2003-1482

CVE-2003-1482 affects the Microsoft MN-500 wireless base station. The issue is that the backup configuration file stores administrative passwords in plaintext, which enables local users to gain access. The available connected documents corroborate this exact description; no public details about a...

Nine smart built Station V5. 2 small holes two-vulnerability and early warning-the black bar safety net

One is the injection vulnerability, newshow. asp id parameter is the presence of injection vulnerabilities, you can guess the member table, get the user account password. The second is upload vulnerability in resource management where you can capture and upload the asp file...

Fragile shangdu v1. 0 1 Press system-vulnerability warning-the black bar safety net

Last weekend at the forum saw a friend made a penetration shangdu official station of the post, the points go see a bit of the original is one of the official demo station of penetration. Penetration of the condition is the default password into the background, and then use the program whole and ...

Sky software Station is hung it and Monyer analysis-vulnerability warning-the black bar safety net

Sky software Station is one of the largest software download station one, and now it is hanging horse, then presumably there are already thousands of people caught. Monyer is not alarmist, the following analysis will prove this is not a joke. Today occasionally the sky to see my UDiskimportant...

Memory corruption

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...

CVE-2007-0734

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...

CVE-2007-0734

CVE-2007-0734 affects the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n and Apple Mac OS X 10.3.9–10.4.9. The fsck component does not properly enforce password protection of a USB hard drive, allowing context-dependent attackers to list arbitrary directories or execute arb...

CVE-2007-1062

The Cisco Unified IP Conference Station 7935 3.215 and earlier, and Station 7936 3.312 and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time...

Authentication flaw

The Cisco Unified IP Conference Station 7935 3.215 and earlier, and Station 7936 3.312 and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time...

CVE-2007-1062

The Cisco Unified IP Conference Station 7935 3.215 and earlier, and Station 7936 3.312 and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time...