Cisco Security Advisory: Wireless ARP Storm Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Wireless ARP Storm Vulnerabilities Advisory ID: cisco-sa-20070724-arp http://www.cisco.com/warp/public/707/cisco-sa-20070724-arp.shtml Revision 1.0 For Public Release 2007 July 24 1600 UTC GMT -...

vonage-default.txt

Vonage VoIP Telephone Adapter Default Misconfiguration The Vonage VoIP Telephone Adapter device is, by default, accessible from the WLAN/internet. The product ships with the default username of 'user' and default password of 'user' to access the administrative backend. Users are suggested to upda...

[SECURITY] Fedora 7 Update: wpa_supplicant-0.5.7-3.fc7

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

Redlevel Advisory #025 - Vonage VoIP Telephone Adapter Default Misconfiguration

Vonage VoIP Telephone Adapter Default Misconfiguration The Vonage VoIP Telephone Adapter device is, by default, accessible from the WLAN/internet. The product ships with the default username of 'user' and default password of 'user' to access the administrative backend. Users are suggested to upda...

Design/Logic Flaw

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

CVE-2007-2041

Cisco Wireless LAN Controller WLC before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs from being loaded at boot time, and might allow remote attackers to bypass intended access restrictions, aka Bug ID CSCse58195...

CVE-2007-2041

CVE-2007-2041 affects Cisco Wireless LAN Controller (WLC) before 4.0.206.0. The WLAN ACL configuration is saved with an invalid checksum, causing WLAN ACLs to fail loading at boot and potentially allowing remote attackers to bypass intended access restrictions (Bug ID CSCse58195). The provided so...

Cisco Wireless LAN Controller multiple security vulnerabilities

Default SNMP communities, default passwords, DoS on Ethrenet frames parsing, multiple NPU DoS conditions, WLAN ACLs are lost during reboot...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:040)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The isdnpppccpresetallocstate function in drivers/isdn/isdnppp.c in the Linux 2.4 kernel before 2.4.34-rc4, as well as the 2.6 kernel, does not call the inittimer function for the ISDN PPP CCP reset state timer, which ha...

CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

CVE-2007-0932

The 1 Aruba Mobility Controllers 200, 600, 2400, and 6000 and 2 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly implement authentication and privilege assignment for the guest account, which allows remote attackers to access administrative interfaces or the WLAN...

[Full-disclosure] Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.001 8-Feb-2007 Vendor: Aruba Networks, http://www.arubanetworks.com Affected Products: Aruba Mobility Controllers 200, 600, 2400, 6000 Alcatel-Lucent OmniAccess Wireless 43xx and 6000 Vulnerability: Unauthorized Administrative a...

Intel® PROSet/Wireless Software Local Information Disclosure

Summary: A security vulnerability exists in the Intel® PROSet/Wireless Software PROSet application because of insecure usage of shared memory allowing a person having access to the user’s computer or malicious software installed on the user’s computer to obtain access to users’ wireless network...

ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution

Synopsis: ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution Product: ATMEL WLAN drivers 3.4.1.1 Version: =3.4.1.1 Product: ======= ATMEL linux PCI, PCMCIA, USB drivers. and configuration utilities. Issue: ====== A critical security vulnerability has been found in ATMEL WLAN drivers...

Intel PROSet/Wireless软件本地信息泄露漏洞

Intel PROSet/Wireless Software是一款无线网络处理软件。 Intel PROSet/Wireless Software不安全设置共享内存信息，本地攻击者可以利用漏洞获得敏感信息。 问题存在于Intel PROSet/Wireless Software 7.x, 8.x, 9.x, 和10.x PROSet application中，恶意用户可以访问共享内存信息获得WLAN预共享WEP密钥和验证信息，目前没有详细漏洞细节提供。 Intel PRO/Wireless 2100 Network Connection Intel PRO/Wireless 2200BG...

Intel PRO/Wireless网络连接驱动远程代码执行漏洞

Intel PRO/Wireless网络连接是Intel迅驰移动技术所集成的WLAN解决方案。 Intel 2200BG和2915ABG PRO/Wireless网络连接硬件的Microsoft Windows驱动处理某些帧的方式存在内存破坏漏洞，远程攻击者可能利用此漏洞在机器执行任意指令。 Wi-Fi站范围内的攻击者可以通过发送特制的报文来触发这个漏洞，导致以内核级权限执行任意代码。 Intel 2200BG/2915ABG http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm...

Intel® PROSet/Wireless Software Local Information Disclosure

Intel® PROSet/Wireless Software Local Information Disclosure Summary: A security vulnerability exists in the Intel® PROSet/Wireless Software PROSet application because of insecure usage of shared memory allowing a person having access to the user's computer or malicious software installed on the...

CVE-2004-2549

Nortel Wireless LAN WLAN Access Point AP 2220, 2221, and 2225 allow remote attackers to cause a denial of service service crash via a TCP request with a large string, followed by 8 newline characters, to 1 the Telnet service on TCP port 23 and 2 the HTTP service on TCP port 80, possibly due to a...

CVE-2004-2549

CVE-2004-2549 affects Nortel WLAN APs 2220, 2221, and 2225. A remote attacker can cause a service crash (DoS) by sending a TCP request containing a large string followed by eight newline characters to Telnet (port 23) or HTTP (port 80); the issue is described as possibly due to a buffer overflow....

CVE-2005-3482

Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol LWAPP mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, allow remote attackers to send unencrypted traffic to a secure network using frames with the MAC...