PT-2002-1285 · Compaq · Compaq Intel Pro/Wireless 2011B Lan Usb Device Driver

Published 2002-05-03 · Updated 2008-09-11 · CVE-2002-0214

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Compaq Intel PRO/Wireless 2011B LAN USB Device Driver versions 1.5.16.0 through 1.5.18.0

Description The issue allows local users to decrypt network traffic by reading the 128-bit WEP key from a registry key with weak permissions, as the key is stored in plaintext.

Recommendations For versions 1.5.16.0 through 1.5.18.0, consider restricting access to the registry key that stores the WEP key to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0214

Affected Products

Compaq Intel Pro/Wireless 2011B Lan Usb Device Driver

References · 4

• http://online.securityfocus.com/archive/1/252607 · Vendor Advisory
• http://iss.net/security_center/static/8015.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0214 · Security Note
• http://securityfocus.com/bid/3968 · Note