EUVD-2008-3137

Malware in sbrugna...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

Design/Logic Flaw

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores 1 WEP, 2 WPA, and 3 WPA2 access-point keys in a ClientWeFiLog.dat, b ClientWeFiLog.bak, and possibly c a certain .inf file under %PROGRAMFILES%\WeFi\Users, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain...

CVE-2008-3147

CVE-2008-3147 concerns WeFi 3.2.1.4.1. When diagnostic mode is enabled, the product stores WEP, WPA, and WPA2 access-point keys in cleartext within files such as ClientWeFiLog.dat, ClientWeFiLog.bak, and possibly a related .inf file under %PROGRAMFILES%\WeFi\Users. This creates local-privilege ri...

Local information disclosure in WeFi Client v3.3.3.0

================================================== INFO ================================================== The wireless client, WeFi v3.3.3.0 is susceptible to a local information disclosure due to irresponsible coding. Earlier versions may also be affected...

wefi3330-lfi.txt

================================================== INFO ================================================== The wireless client, WeFi v3.3.3.0 is susceptible to a local information disclosure due to irresponsible coding. Earlier versions may also be affected...

WeFi information leak

Log files are stored in world-readable folder...

WeFi日志文件本地信息泄露漏洞

BUGTRAQ ID: 30088 WeFi是一种搜索无线网络WiFi的软件，可以监测到附近的无线信号，并可以共享开放的无线网络。 WeFi没有加密密钥，且客户端没有正确地储存日志文件备份，本地攻击者可以获得WEP、WPA和WPA2接入点的未加密密钥。保存密钥的日志文件如下： C:\Program Files\WeFi\LogFiles\ClientWeFiLog.dat C:\Program Files\WeFi\LogFiles\ClientWeFiLog.bak C:\Program Files\WeFi\Users\[email protected] 以下是备份文件代码的示例：...

Local vulnerability in WeFi Client v3.2.1.4.1(Update)

================================================== INFO ================================================== The wireless client, WeFi v3.2.1.4.1 is susceptible to local vulnerabilities due to improper coding. Earlier versions may also be affected. ==================================================...