CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.8 | $0-$5k | 0.00 |
A vulnerability classified as problematic has been found in Madwifi 0.9.3.2 (Wireless LAN Software). Affected is some unknown functionality of the component net80211. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly. This is going to have an impact on availability. CVE summarizes:
Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a beacon frame with a large length value in the extended supported rates (xrates) element, which triggers an assertion error, related to net80211/ieee80211_scan_ap.c and net80211/ieee80211_scan_sta.c.
The bug was discovered 10/11/2007. The weakness was presented 10/14/2007 by Secure Systems Lab (Website). The advisory is available at secunia.com. This vulnerability is traded as CVE-2007-5448 since 10/14/2007. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available.
It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 3 days. During that time the estimated underground price was around $0-$5k. The vulnerability scanner Nessus provides a plugin with the ID 27826 (GLSA-200711-09 : MadWifi: Denial of Service), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Gentoo Local Security Checks and running in the context l.
Upgrading eliminates this vulnerability. A possible mitigation has been published 4 weeks after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (37182) and Tenable (27826).
Product
Type
Name
Version
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.8
VulDB Base Score: 5.3
VulDB Temp Score: 4.8
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Input validationCWE: CWE-20
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 27826
Nessus Name: GLSA-200711-09 : MadWifi: Denial of Service
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Nessus Port: 🔍
OpenVAS ID: 830524
OpenVAS Name: Mandriva Update for mysql MDVA-2012:049 (mysql)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Timeline
10/11/2007 🔍10/11/2007 🔍
10/12/2007 🔍
10/12/2007 🔍
10/14/2007 🔍
10/14/2007 🔍
10/14/2007 🔍
11/07/2007 🔍
11/08/2007 🔍
11/13/2007 🔍
03/16/2015 🔍
07/29/2021 🔍
Sources
Advisory: 2736⛔Researcher: Secure Systems Lab
Status: Not defined
Confirmation: 🔍
CVE: CVE-2007-5448 (🔍)
X-Force: 37182
Vulnerability Center: 16767 - MadWifi Beacon Frames Handling Error Allows Remote Attacker to Cause DoS, Medium
SecurityFocus: 26052 - MadWifi Xrates Element Remote Denial of Service Vulnerability
Secunia: 27197
OSVDB: 37971 - MadWifi - Xrates Element - Remote Denial of Service Issue
Vupen: ADV-2007-3493
Entry
Created: 03/16/2015 12:18Updated: 07/29/2021 10:02
Changes: 03/16/2015 12:18 (76), 07/30/2019 08:49 (6), 07/29/2021 10:02 (3)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.