Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.

saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE Router Vendor: Alice Telecom Italia...

CVE-2008-4540

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

Design/Logic Flaw

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

CVE-2008-4540

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

CVE-2008-4540

This CVE concerns Windows Mobile 6 on the HTC Hermes, where WLAN passwords are exposed to the auto-completion mechanism of the password field. The root cause is that the password input handling allows nearby attackers to retrieve credentials, enabling bypass of WLAN authentication and potential u...

Re: Fwd: Nokia e90 (Probably, and other devices with s60v3) Crashes

The appendix to the message 14.09.2008 about Nokia e90 ++ N82 For attack realisation is necessary to send DeAuth a package on the attacked device to throw out it from an access point, then to continue to send packages on the device. the Device is crashed off right after repeated authorisation on ...

Nokia e90n82 (s60v3) - Remote Denial of Service

Nokia e90n82 s60v3 - Remote Denial of Service Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6 For...

Nokia e90/n82 (s60v3) - Remote Denial of Service

Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6 For attack realisation is necessary to send DeAuth a...

Nokia e90/n82 (s60v3) Remote Denial of Service Vulnerability

No description provided by source. Nokia E90 and probably other devices with s60v3 crashes with aireplay The device should be authorised on an access point sample: aireplay-ng -0 10 -a 00:74:3B:0C:A0:5A -c 00:2A:29:F3:1F:42 wlan0 My HW: AP= Acorp w422g Nokia E90 v 07.40.1.2 Ra-6 For attack...

Nokia e90/n82 (s60v3) Remote Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ============================================================ Nokia e90/n82 s60v3 Remote Denial of Service Vulnerability ============================================================ Nokia E90 and probably other devices with s60v3 crashes with...

Siemens Gigaset WLAN Camera不安全默认密码漏洞

BUGTRAQ ID: 30973 CNCAN ID：CNCAN-2008090308 Siemens Gigaset WLAN Camera是一款基于LAN和WLAN的摄像头设备。 Siemens Gigaset WLAN Camera存在不安全默认密码，远程攻击者可以利用此密码未授权访问应用程序 Siemens Gigaset WLAN Camera 1.27 目前没有解决方案提供：...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4741)

This kernel update fixes the following security problems : - The sysfsreaddir function in the Linux kernel 2.6 allows local users to cause a denial of service kernel OOPS by dereferencing a NULL pointer to an inode in a dentry. CVE-2007-3104 - A 2 byte buffer underflow in the ieee80211 stack was...

openSUSE 10 Security Update : kernel (kernel-4641)

This kernel update fixes the following security problems : ++ CVE-2006-6058: A local denial of service when mounting MINIX filesystems was fixed. ++ CVE-2007-4997: A 2 byte buffer underflow in the ieee80211 stack was fixed, which might be used by attackers in WLAN reach to crash the machine. and...

CVE-2007-5639

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...

CVE-2007-4488

Multiple cross-site scripting XSS vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for 1 a GIF filename, which triggers display of the GIF file ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for 1 a GIF filename, which triggers display of the GIF file ...

CVE-2007-4488

CVE-2007-4488 affects the Siemens Gigaset SE361 WLAN router running firmware 1.00.0. It contains two cross-site scripting vulnerabilities triggered by the URI portion following the filename: (1) a GIF filename leading to text-format display of the GIF and an unspecified denial-of-service (crash);...

CVE-2007-4488

Multiple cross-site scripting XSS vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to inject arbitrary web script or HTML via the portion of the URI immediately following the filename for 1 a GIF filename, which triggers display of the GIF file ...

CVE-2007-4011

Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller WLC software before 3.2 20070727, 4.0 before 20070727, and 4.1 before 4.1.180.0 allows remote attackers to cause a denial of service traffic amplification or ARP storm via a crafted unicast ARP request that 1...

CVE-2007-4011

CVE-2007-4011 affects Cisco 4100/4400, Airespace 4000, and Catalyst 6500/3750 WLC software. The vulnerability permits remote DoS (traffic amplification or ARP storm) via crafted unicast ARP requests. Impact arises when the destination MAC is unknown to Layer-2 infrastructure (CSCsj69233) or durin...