Advisory: WZCS vulnerabilities

Summary "The Wireless Zero Configuration system service enables automatic configuration for IEEE 802.11 wireless adapters for wireless communication." There are two closely related vulnerabilities: Once the "View Available Wireless Networks" dialogue box is opened the Pair-wise Master Keys of the...

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key...

Microsoft Windows XP - Wireless Zero Configuration Service Information Disclosure

source: https://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key authentication and the WEP keys of the interface may be obtained by a local unauthorized...

CVE-2005-2196

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2005-2196

The CVE-2005-2196 entry concerns the Apple AirPort card using a default WEP key when not connected to a known/trusted network, which can cause it to automatically connect to a malicious network. The connected documents reference the broader issue in related Airport/Mac OS X contexts (e.g., Nessus...

CVE-2005-2196

The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network...

CVE-2002-1810

D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive information such as the administrative password, the WEP encryption keys, and network configuration information...

CVE-2001-0160

Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector IV values for the Wireless Encryption Protocol WEP which allows remote attackers to quickly compile information that will let them decrypt messages...

CVE-2001-0161

The CVE-2001-0161 entry concerns Cisco 340-series Aironet access points running firmware 11.01. The vulnerability arises because the device does not use 6 of the 24 available IV bits in WEP, which makes it easier for remote attackers to perform brute-force attacks. The provided documents confirm ...

CVE-2001-0161

Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks...

[Full-Disclosure] 3COM 3crwe754g72-a Information Disclosure, Logs manipulation ...

Title: 3com 3crwe754g72-a Information Disclosure Class: Design Error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0000 Release Date: 2004 10 18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle product which...

CVE-2003-1264

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

Cisco WEP key leak via SNMP trap

SNMP trap message contains key information...

[Full-Disclosure] Cisco Security Advisory: SNMP trap Reveals WEP Key in Cisco Aironet AP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SNMP trap Reveals WEP Key in Cisco Aironet AP Revision 1.0 For Public Release 2003 December 02 17:00 UTC GMT - ------------------------------------------------------------------------ Summary ======= Cisco Aironet Access Point...

SNMP Trap Reveals WEP Key in Cisco Aironet Access Point

...

CVE-2003-0934

Symbol Access Portable Data Terminal PDT 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network...

CVE-2003-0934

Symbol Access Portable Data Terminal PDT 8100 does not hide the default WEP keys if they are not changed, which could allow attackers to retrieve the keys and gain access to the wireless network...

CVE-2003-0934

Technical details about CVE-2003-0934 are not publicly provided in the connected documents; no affected versions, vectors, or fixes are specified here. Monitor for updates.

CVE-2003-0270

Apple AirPort Base Station (802.11) is affected by CVE-2003-0270. The administrative protocol on TCP 5009 uses XOR with a fixed key to protect credentials, allowing an attacker that can sniff traffic over Ethernet or non-WEP wireless to obtain administrative access. The flaw impacts confidentiali...

PT-2002-2532 · D Link · D-Link Dwl-900Ap+ Access Point

Name of the Vulnerable Software and Affected Versions: D-Link DWL-900AP+ Access Point versions 2.1 through 2.2 Description: The issue allows remote attackers to access the TFTP server without authentication and read the config.img file. This file contains sensitive information, including the...