LWN.net Logo

madwifi-ng: buffer overflow

Package(s):madwifi-ng CVE #(s):CVE-2006-6332
Created:December 11, 2006 Updated:December 13, 2006
Description: Laurent Butti, Jerome Raznieski and Julien Tinnes reported a buffer overflow in the encode_ie() and the giwscan_cb() functions from ieee80211_wireless.c. A remote attacker could send specially crafted wireless WPA packets containing malicious RSN Information Headers (IE) that could potentially lead to the remote execution of arbitrary code as the root user.
Alerts:
SuSE SUSE-SA:2006:074 2006-12-11
Gentoo 200612-09 2006-12-10

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds