CVE-2009-2861

The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka "SkyJack" or Bug ID CSCtb56664.

• http://securitytracker.com/id?1022774
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18919Patch, Vendor Advisory
• http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf
• http://www.airmagnet.com/news/press_releases/2009/08252009.php
• http://www.securityfocus.com/bid/36145
• http://www.vupen.com/english/advisories/2009/2419Vendor Advisory
• http://securitytracker.com/id?1022774
• http://tools.cisco.com/security/center/viewAlert.x?alertId=18919Patch, Vendor Advisory
• http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf
• http://www.airmagnet.com/news/press_releases/2009/08252009.php
• http://www.securityfocus.com/bid/36145
• http://www.vupen.com/english/advisories/2009/2419Vendor Advisory

Published

Aug 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2855The strListGetItem function in src/HttpHeaderTools.c in Squi…
• CVE-2009-2856Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous…
• CVE-2009-2857The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris befo…5.5
• CVE-2009-2858Memory leak in the Security component in IBM DB2 8.1 before …
• CVE-2009-2859IBM DB2 8.1 before FP18 allows attackers to obtain unspecifi…
• CVE-2009-2860Unspecified vulnerability in db2jds in IBM DB2 8.1 before FP…
• CVE-2009-2862The Object Groups for Access Control Lists (ACLs) feature in…
• CVE-2009-2863Race condition in the Firewall Authentication Proxy feature …
• CVE-2009-2864Cisco Unified Communications Manager (aka CUCM, formerly Cal…
• CVE-2009-2865Buffer overflow in the login implementation in the Extension…
• CVE-2009-2866Unspecified vulnerability in Cisco IOS 12.2 through 12.4 all…
• CVE-2009-2867Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.…