PT-2006-6944 · Madwifi · Madwifi

Jerome Raznieski + 2 · Published 2006-12-10 · Updated 2017-07-29 · CVE-2006-6332

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MadWifi versions prior to 0.9.2.1

Description A stack-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code. This issue is related to the encode ie and giwscan cb functions.

Recommendations For versions prior to 0.9.2.1, update to version 0.9.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the wireless network to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-6332

Affected Products

Madwifi

References · 18

• 🔥 https://exploit-db.com/exploits/16835 · Exploit
• 🔥 https://exploit-db.com/exploits/10024 · Exploit
• 🔥 https://exploit-db.com/exploits/3389 · Exploit
• http://madwifi.org/changeset/1842 · Patch
• http://security.gentoo.org/glsa/glsa-200612-09.xml · Vendor Advisory
• http://secunia.com/advisories/23277 · Vendor Advisory
• http://ubuntu.com/usn/usn-404-1 · Vendor Advisory
• http://securityfocus.com/bid/21486 · Patch
• http://novell.com/linux/security/advisories/2006_74_madwifi.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6332 · Security Note
• http://novell.com/linux/security/advisories/2006_28_sr.html · Vendor Advisory
• http://lists.immunitysec.com/pipermail/dailydave/2006-December/003888.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30800 · Note
• http://secunia.com/advisories/23335 · Note
• http://secunia.com/advisories/23694 · Note