CVE-2013-4219

CVE-2013-4219 : Multiple integer overflows in the Intel WiMAX Network Service up to version 1.5.2 on Intel Wireless WiMAX Connection 2400 devices allow remote attackers to trigger a heap-based buffer overflow via crafted PDU values over an L5 connection, potentially causing a component crash (DoS...

CVE-2013-4218

The CVE-2013-4218 entry concerns the Intel WiMAX Network Service (Intel Wireless WiMAX Connection 2400) up to version 1.5.2. The vulnerability stems from the InitMethodAndPassword function in SupplicantAgent.c, which uses the same RSA private key in supplicant_key.pem across all systems. This har...

CVE-2013-4216

The CVE-2013-4216 issue affects the Intel WiMAX Network Service (Intel Wireless WiMAX Connection 2400) up to version 1.5.2. The Trace_OpenLogFile function in InfraStack/OSDependent/Linux/InfraStackModules/TraceModule/TraceModule.c creates or uses wimaxd.log with world-writable permissions, allowi...

CVE-2013-4217

The CVE-2013-4217 entry affects the OSAL crypt module in InfraStack/OSDependent/Linux/OSAL/Services/wimax_osal_crypt_services.c for Intel Wireless WiMAX Connection 2400 devices. The function OSAL_Crypt_SetEncryptedPassword logs a cleartext password during certain attempts to set a password, enabl...