PT-2009-6061 · Aruba · Arubaos

Published 2009-11-02 · Updated 2009-11-09 · CVE-2009-3836

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ArubaOS versions 3.1.x through 3.4.x

Description The issue allows remote attackers to cause a denial of service, resulting in an Access Point crash, by sending a malformed 802.11 Association Request management frame.

Recommendations For versions 3.1.x through 3.4.x, consider restricting access to the affected management frame to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2009-3836

Affected Products

Arubaos

References · 5

• http://arubanetworks.com/support/alerts/aid-102609.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3836 · Security Note
• http://vupen.com/english/advisories/2009/3051 · Vendor Advisory
• http://secunia.com/advisories/37085 · Vendor Advisory
• http://securityfocus.com/bid/36832 · Note