Wireless Vulnerabilities & Exploits
Wireless Vulnerabilities & Exploits
WVE ID: WVE-2008-0009
Type: Vulnerability
Status: Candidate
Classification:
Input Manipulation
Description:
Some versions of the Marvell wireless driver used in access points such as the Netgear WN802T do not correctly validate the EAPOL key fields.
Discussion:
A malicious EAPOL-Key packet with an invalid advertised length can trigger a denial of service or possible code execution. This can only be achieved after a successful 802.11 association exchange.
Credits
Author:
Laurent
Butti
(laurent.butti@orange-ftgroup.com)
: Orange FT
Author:
Julien
Tinnes
(julien.tinnes@orange-ftgroup.com)
: Orange-FT
References
URL:
http://www.securityfocus.com/archive/1/495982
Released: 2008-09-04
Submitter
: None
Submitted: Mon Sep 15 07:11:05 -0700 2008
Candidate Date: Wed Sep 17 12:28:16 -0700 2008
