CVE-2008-5230

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

CVE-2008-4441

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service reboot or hang-up via a malformed...

CVE-2008-4441

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service reboot or hang-up via a malformed...

CVE-2008-4441

Summary: CVE-2008-4441 affects Linksys WAP4400N (firmware 1.2.14) with Marvell 88W8361P‑BEM1. When in WEP mode, the Marvell wireless driver fails to parse certain malformed 802.11 frames, enabling a remote attacker to cause a denial of service (reboot or hang) by sending a malformed association r...

Marvell Driver Malformed Association Request Vulnerability

Title: ------ Marvell Driver Malformed Association Request Vulnerability Summary: -------- The wireless drivers in some Wi-Fi access points such as the MARVELL-based Linksys WAP4400N do not correctly parse some malformed 802.11 frames. Assigned CVE: ------------- CVE-2008-4441 Details: -------- T...

Nokia e90 phone Wi-Fi DoS

Device crash on malformed Wi-Fi frame...

Marvell Driver Null SSID Association Request Vulnerability

Title: ------ Marvell Driver Null SSID Association Request Vulnerability Summary: ------ The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse SSID information element included in association requests. Most information elements are used b...

Cross site request forgery (csrf)

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

Cross site request forgery (csrf)

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

CVE-2008-1144

CVE-2008-1144 affects the Netgear WN802T Wi‑Fi AP with Marvell 88W8361P‑BEM1, where the Marvell driver mishandles EAPoL‑Key packets. A crafted EAPoL‑Key with an advertised length can be used by remote authenticated users to cause a denial of service (device reboot or hang) and may enable arbitrar...

CVE-2008-1197

CVE-2008-1197 affects Netgear WN802T (firmware 1.3.16) using Marvell 88W8361P-BEM1. The driver fails to correctly parse the SSID information element in an association request, enabling remote authenticated users to trigger a denial of service (device reboot/hang) and potentially execute arbitrary...

CVE-2008-1197

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or hang or...

CVE-2007-5474

The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service device reboot or...

CVE-2007-5474

CVE-2007-5474 affects Linksys WRT350N (firmware 2.00.17) using Atheros AR5416-AC1E. The vulnerability arises from incorrect parsing of the Atheros vendor-specific information element in an association request, allowing a too-long information element to cause a denial of service (device reboot or ...

SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-02 = ====================================================================== Cygwin Installation and Update Process can be Subverted Vulnerability...

BT Home Hub管理员口令泄露漏洞

BUGTRAQ ID: 29387 BT Home Hub是家用的无线Internet路由器。 BT Home Hub的最新固件版本添加了一个新的安全功能，允许将默认的管理员口令从admin更改为路由器的序列号，但只要向路由器所在的网络发送MDAP多播请求就可以得到Home Hub的序列号。 如果要利用这个漏洞，攻击者必须通过ethernet或Wi-Fi加入到Home Hub所在的LAN。有两种方式可以入侵到BT Home Hub Wi-Fi网络： - arp回放注入和弱IV破解 - 通过SSID暴力猜测Home Hub的默认WEP密钥列表 British...

MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub

http://www.gnucitizen.org/blog/dumping-the-admin-password-of-the-bt-home-hub/ We're back with more security attacks against the BT Home Hub most popular wireless DSL router in the UK! BT added a new security feature on the latest version 1 of the BT Home Hub firmware 6.2.6.E at time of writing...

Cross site request forgery (csrf)

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...