PT-2009-1165 · Linksys+1 · Linksys Wap4400N+1

Published 2009-11-12 · Updated 2018-10-15 · CVE-2007-5475

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linksys WAP4400N Wi-Fi access point with firmware version 1.2.17

Description The issue is related to multiple buffer overflows in the Marvell wireless driver. This can be exploited by remote 802.11-authenticated users to cause a denial of service, potentially leading to a wireless access point crash. It may also be possible for attackers to execute arbitrary code via an association request containing long rates, extended rates, and other unspecified information elements.

Recommendations For Linksys WAP4400N Wi-Fi access point with firmware version 1.2.17, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5475

Affected Products

Linksys Wap4400N

Marvell Wireless Driver

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-5475 · Security Note
• http://securityfocus.com/archive/1/507781/100/0/threaded · Note
• http://secunia.com/advisories/37345 · Note
• http://vupen.com/english/advisories/2009/3239 · Note