Search criteria
2 vulnerabilities found for wimax_prost by airspan
CVE-2008-1262 (GCVE-0-2008-1262)
Vulnerability from nvd – Published: 2008-03-10 17:00 – Updated: 2024-08-07 08:17
VLAI
Summary
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/489009/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/28122 | vdb-entryx_refsource_BID |
| http://www.gnucitizen.org/projects/router-hacking… | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.kb.cert.org/vuls/id/248372 | third-party-advisoryx_refsource_CERT-VN |
| http://www.0x000000.com/?i=524 | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2008/0802… | vdb-entryx_refsource_VUPEN |
| http://www.sharemethods.net/nepal/servlet/open?ke… | x_refsource_CONFIRM |
| http://airspan4wimax.googlepages.com/ | x_refsource_MISC |
| http://secunia.com/advisories/29265 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2008-02-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:17:34.390Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20080301 The Router Hacking Challenge is Over!",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded"
},
{
"name": "28122",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28122"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.gnucitizen.org/projects/router-hacking-challenge/"
},
{
"name": "wimaxprost-webinterface-security-bypass(41052)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41052"
},
{
"name": "VU#248372",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/248372"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.0x000000.com/?i=524"
},
{
"name": "ADV-2008-0802",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0802/references"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://airspan4wimax.googlepages.com/"
},
{
"name": "29265",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29265"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-02-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20080301 The Router Hacking Challenge is Over!",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded"
},
{
"name": "28122",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28122"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.gnucitizen.org/projects/router-hacking-challenge/"
},
{
"name": "wimaxprost-webinterface-security-bypass(41052)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41052"
},
{
"name": "VU#248372",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/248372"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.0x000000.com/?i=524"
},
{
"name": "ADV-2008-0802",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0802/references"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://airspan4wimax.googlepages.com/"
},
{
"name": "29265",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29265"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-1262",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20080301 The Router Hacking Challenge is Over!",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded"
},
{
"name": "28122",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28122"
},
{
"name": "http://www.gnucitizen.org/projects/router-hacking-challenge/",
"refsource": "MISC",
"url": "http://www.gnucitizen.org/projects/router-hacking-challenge/"
},
{
"name": "wimaxprost-webinterface-security-bypass(41052)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41052"
},
{
"name": "VU#248372",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/248372"
},
{
"name": "http://www.0x000000.com/?i=524",
"refsource": "MISC",
"url": "http://www.0x000000.com/?i=524"
},
{
"name": "ADV-2008-0802",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0802/references"
},
{
"name": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820",
"refsource": "CONFIRM",
"url": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820"
},
{
"name": "http://airspan4wimax.googlepages.com/",
"refsource": "MISC",
"url": "http://airspan4wimax.googlepages.com/"
},
{
"name": "29265",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29265"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-1262",
"datePublished": "2008-03-10T17:00:00.000Z",
"dateReserved": "2008-03-10T00:00:00.000Z",
"dateUpdated": "2024-08-07T08:17:34.390Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2008-1262 (GCVE-0-2008-1262)
Vulnerability from cvelistv5 – Published: 2008-03-10 17:00 – Updated: 2024-08-07 08:17
VLAI
Summary
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
10 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/archive/1/489009/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/28122 | vdb-entryx_refsource_BID |
| http://www.gnucitizen.org/projects/router-hacking… | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.kb.cert.org/vuls/id/248372 | third-party-advisoryx_refsource_CERT-VN |
| http://www.0x000000.com/?i=524 | x_refsource_MISC |
| http://www.vupen.com/english/advisories/2008/0802… | vdb-entryx_refsource_VUPEN |
| http://www.sharemethods.net/nepal/servlet/open?ke… | x_refsource_CONFIRM |
| http://airspan4wimax.googlepages.com/ | x_refsource_MISC |
| http://secunia.com/advisories/29265 | third-party-advisoryx_refsource_SECUNIA |
Date Public
2008-02-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T08:17:34.390Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20080301 The Router Hacking Challenge is Over!",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded"
},
{
"name": "28122",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/28122"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.gnucitizen.org/projects/router-hacking-challenge/"
},
{
"name": "wimaxprost-webinterface-security-bypass(41052)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41052"
},
{
"name": "VU#248372",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN",
"x_transferred"
],
"url": "http://www.kb.cert.org/vuls/id/248372"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.0x000000.com/?i=524"
},
{
"name": "ADV-2008-0802",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2008/0802/references"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://airspan4wimax.googlepages.com/"
},
{
"name": "29265",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/29265"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2008-02-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-11T19:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20080301 The Router Hacking Challenge is Over!",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded"
},
{
"name": "28122",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/28122"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.gnucitizen.org/projects/router-hacking-challenge/"
},
{
"name": "wimaxprost-webinterface-security-bypass(41052)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41052"
},
{
"name": "VU#248372",
"tags": [
"third-party-advisory",
"x_refsource_CERT-VN"
],
"url": "http://www.kb.cert.org/vuls/id/248372"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.0x000000.com/?i=524"
},
{
"name": "ADV-2008-0802",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2008/0802/references"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://airspan4wimax.googlepages.com/"
},
{
"name": "29265",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/29265"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2008-1262",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20080301 The Router Hacking Challenge is Over!",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/489009/100/0/threaded"
},
{
"name": "28122",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/28122"
},
{
"name": "http://www.gnucitizen.org/projects/router-hacking-challenge/",
"refsource": "MISC",
"url": "http://www.gnucitizen.org/projects/router-hacking-challenge/"
},
{
"name": "wimaxprost-webinterface-security-bypass(41052)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41052"
},
{
"name": "VU#248372",
"refsource": "CERT-VN",
"url": "http://www.kb.cert.org/vuls/id/248372"
},
{
"name": "http://www.0x000000.com/?i=524",
"refsource": "MISC",
"url": "http://www.0x000000.com/?i=524"
},
{
"name": "ADV-2008-0802",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2008/0802/references"
},
{
"name": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820",
"refsource": "CONFIRM",
"url": "http://www.sharemethods.net/nepal/servlet/open?keeppath=false\u0026aid=29820"
},
{
"name": "http://airspan4wimax.googlepages.com/",
"refsource": "MISC",
"url": "http://airspan4wimax.googlepages.com/"
},
{
"name": "29265",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/29265"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2008-1262",
"datePublished": "2008-03-10T17:00:00.000Z",
"dateReserved": "2008-03-10T00:00:00.000Z",
"dateUpdated": "2024-08-07T08:17:34.390Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}