Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wireless tools wireless tools 21 vulnerabilities and exploits

(subscribe to this query)
725
VMScore
CVE-2003-0948
Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.
Wireless Tools Wireless Tools 20Wireless Tools Wireless Tools 21Wireless Tools Wireless Tools 22Wireless Tools Wireless Tools 23Wireless Tools Wireless Tools 24Wireless Tools Wireless Tools 25Wireless Tools Wireless Tools 19Wireless Tools Wireless Tools 26
740
VMScore
CVE-2003-0947
Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.
Wireless Tools Project Wireless Tools 19Wireless Tools Project Wireless Tools 20Wireless Tools Project Wireless Tools 21Wireless Tools Project Wireless Tools 22Wireless Tools Project Wireless Tools 23Wireless Tools Project Wireless Tools 24Wireless Tools Project Wireless Tools 25Wireless Tools Project Wireless Tools 26
694
VMScore
CVE-2005-3732
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools prior to 0.6.3, when running in aggressive mode, allows remote malicious users to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by ...
Ipsec-tools Ipsec-tools 0.5.2Ipsec-tools Ipsec-tools 0.6Ipsec-tools Ipsec-tools 0.6.1Ipsec-tools Ipsec-tools 0.6.2Ipsec-tools Ipsec-tools 0.5Ipsec-tools Ipsec-tools 0.5.1
445
VMScore
CVE-2015-8139
ntpq in NTP prior to 4.2.8p7 allows remote malicious users to obtain origin timestamps and then impersonate peers via unspecified vectors.
Ntp Ntp
516
VMScore
CVE-2015-8140
The ntpq protocol in NTP prior to 4.2.8p7 allows remote malicious users to conduct replay attacks by sniffing the network.
Ntp Ntp
516
VMScore
CVE-2015-7973
NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90, when configured in broadcast mode, allows man-in-the-middle malicious users to conduct replay attacks by sniffing the network.
Ntp NtpNtp Ntp 4.2.8Siemens Tim 4r-ie FirmwareSiemens Tim 4r-ie Dnp3 FirmwareFreebsd Freebsd 9.3Freebsd FreebsdFreebsd Freebsd 10.1Freebsd Freebsd 10.2Netapp Clustered Data Ontap -Netapp Oncommand Balance -Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04
187
VMScore
CVE-2015-7975
The nextvar function in NTP prior to 4.2.8p6 and 4.3.x prior to 4.3.90 does not properly validate the length of its input, which allows an malicious user to cause a denial of service (application crash).
Ntp Ntp 4.3.0Ntp Ntp 4.3.1Ntp Ntp 4.3.16Ntp Ntp 4.3.17Ntp Ntp 4.3.18Ntp Ntp 4.3.24Ntp Ntp 4.3.25Ntp Ntp 4.3.31Ntp Ntp 4.3.32Ntp Ntp 4.3.39Ntp Ntp 4.3.4Ntp Ntp 4.3.40Ntp Ntp 4.3.47Ntp Ntp 4.3.48Ntp Ntp 4.3.54Ntp Ntp 4.3.55Ntp Ntp 4.3.62Ntp Ntp 4.3.63Ntp Ntp 4.3.7Ntp Ntp 4.3.70Ntp Ntp 4.3.77Ntp Ntp 4.3.78
385
VMScore
CVE-2021-3449
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
356
VMScore
CVE-2015-7976
The ntpq saveconfig command in NTP 4.1.2, 4.2.x prior to 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows malicious users to cause unspecified impact via a crafted filename.
Ntp Ntp 4.1.2Ntp NtpNtp Ntp 4.3.0Ntp Ntp 4.3.1Ntp Ntp 4.3.16Ntp Ntp 4.3.17Ntp Ntp 4.3.24Ntp Ntp 4.3.25Ntp Ntp 4.3.31Ntp Ntp 4.3.32Ntp Ntp 4.3.39Ntp Ntp 4.3.4Ntp Ntp 4.3.47Ntp Ntp 4.3.48Ntp Ntp 4.3.54Ntp Ntp 4.3.55Ntp Ntp 4.3.61Ntp Ntp 4.3.62Ntp Ntp 4.3.63Ntp Ntp 4.3.7Ntp Ntp 4.3.70Ntp Ntp 4.3.77
445
VMScore
CVE-2015-0207
The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 prior to 1.0.2a does not properly isolate the state information of independent data streams, which allows remote malicious users to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DT...
Openssl Openssl 1.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook