BID:12664

WPA_Supplicant Remote Buffer Overflow Vulnerability

Info

WPA_Supplicant Remote Buffer Overflow Vulnerability

Bugtraq ID:	12664
Class:	Boundary Condition Error
CVE:	CVE-2005-0470
Remote:	Yes
Local:	No
Published:	Feb 16 2005 12:00AM
Updated:	Jul 12 2009 10:56AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	wpa_supplicant wpa_supplicant 0.2.6 wpa_supplicant wpa_supplicant 0.2.5 wpa_supplicant wpa_supplicant 0.2.4 wpa_supplicant wpa_supplicant 0.2.3 wpa_supplicant wpa_supplicant 0.2.2 wpa_supplicant wpa_supplicant 0.2.1 wpa_supplicant wpa_supplicant 0.2 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 Gentoo Linux

Not Vulnerable:	wpa_supplicant wpa_supplicant 0.2.7 + Gentoo Linux

Discussion

WPA_Supplicant Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability affects wpa_supplicant. This issue is due to a failure of the application to securely copy network-derived data into internal process buffers.

Reportedly this issue may be leveraged to carry out denial of service attacks against affected computers. It should also be noted that due to the nature of this issue code execution may also be possible.

Exploit / POC

WPA_Supplicant Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

WPA_Supplicant Remote Buffer Overflow Vulnerability

Solution:
The vendor has made an advisory available.

Gentoo Linux has released advisory GLSA 200502-22 dealing with this issue. Gentoo advises that all wpa_supplicant users should upgrade to the latest version:

emerge --sync
emerge --ask --oneshot --verbose ">=net-wireless/wpa_supplicant-0.2.7"

For more information, please see the referenced Gentoo Linux advisory.

SuSE Linux has released a security summary report (SUSE-SR:2005:006) that contains fixes to address this and other vulnerabilities. Customers are advised to peruse the referenced advisory for further information regarding obtaining and applying appropriate updates.

wpa_supplicant wpa_supplicant 0.2