PT-2009-1165 · Linksys+1 · Linksys Wap4400N+1

Publicado 2009-11-12 · Atualizado 2018-10-15 · CVE-2007-5475

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linksys WAP4400N Wi-Fi access point with firmware version 1.2.17

Description The issue is related to multiple buffer overflows in the Marvell wireless driver. This can be exploited by remote 802.11-authenticated users to cause a denial of service, potentially leading to a wireless access point crash. It may also be possible for attackers to execute arbitrary code via an association request containing long rates, extended rates, and other unspecified information elements.

Recommendations For Linksys WAP4400N Wi-Fi access point with firmware version 1.2.17, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5475

Produtos afetados

Linksys Wap4400N

Marvell Wireless Driver

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-5475 · Nota de Segurança
• http://securityfocus.com/archive/1/507781/100/0/threaded · Nota
• http://secunia.com/advisories/37345 · Nota
• http://vupen.com/english/advisories/2009/3239 · Nota