PT-2005-4278 · Cisco+1 · Cisco 1240 Series Access Points+3

Published 2005-11-03 · Updated 2011-03-08 · CVE-2005-3482

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco 1200, 1131, and 1240 series Access Points versions (affected versions not specified) Airespace WLAN controllers versions 3.1.59.24

Description The issue allows remote attackers to send unencrypted traffic to a secure network by using frames with the MAC address of an authenticated end host, when the access points are operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by the specified WLAN controllers.

Recommendations For Cisco 1200, 1131, and 1240 series Access Points, consider restricting access to the network until a fix is available. For Airespace WLAN controllers version 3.1.59.24, restrict the use of LWAPP mode to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3482

Affected Products

Airespace Wlan Controllers

Cisco 1131 Series Access Points

Cisco 1200 Series Access Points

Cisco 1240 Series Access Points

References · 8

• http://cisco.com/warp/public/707/cisco-sa-20051102-lwapp.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3482 · Security Note
• http://securityfocus.com/bid/15272 · Note
• http://vupen.com/english/advisories/2005/2278 · Note
• http://secunia.com/advisories/17406 · Note
• http://osvdb.org/20454 · Note
• http://securityreason.com/securityalert/139 · Note
• http://securitytracker.com/id?1015140 · Note