Multiple Ralinktech Wireless Drivers MAC/BSS/SSID Integer Overflow Vulnerability
BID:33340
Info
Multiple Ralinktech Wireless Drivers MAC/BSS/SSID Integer Overflow Vulnerability
| Bugtraq ID: | 33340 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-0282 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 19 2009 12:00AM |
| Updated: | Jul 15 2009 09:06PM |
| Credit: | Aviv |
| Vulnerable: |
Ralink Technology Ralink USB Wireless Adapter (RT73) 3.08 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: | |
Discussion
Multiple Ralinktech Wireless Drivers MAC/BSS/SSID Integer Overflow Vulnerability
Multiple Ralinktech wireless drivers are prone to an integer-overflow vulnerability because they fail to ensure that integer values aren't overrrun.
Successful exploits may allow remote attackers to execute arbitrary code with kernel-level privileges, resulting in the complete compromise of an affected device. Failed exploit attempts will likely cause denial-of-service conditions.
Ralink USB Wireless Adapter (RT73) 3.08 is affected. Other unspecified devices are also affected.
Multiple Ralinktech wireless drivers are prone to an integer-overflow vulnerability because they fail to ensure that integer values aren't overrrun.
Successful exploits may allow remote attackers to execute arbitrary code with kernel-level privileges, resulting in the complete compromise of an affected device. Failed exploit attempts will likely cause denial-of-service conditions.
Ralink USB Wireless Adapter (RT73) 3.08 is affected. Other unspecified devices are also affected.
Exploit / POC
Multiple Ralinktech Wireless Drivers MAC/BSS/SSID Integer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple Ralinktech Wireless Drivers MAC/BSS/SSID Integer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Debian Linux 4.0
Debian Linux 4.0 amd64
Debian Linux 4.0 mipsel
Debian Linux 4.0 ia-32
Debian Linux 4.0 arm
Debian Linux 4.0 hppa
Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 4.0 powerpc
Debian Linux 4.0 alpha
Debian Linux 4.0 ia-64
Debian Linux 4.0 mips
Debian Linux 4.0 m68k
Solution:
Updates are available. Please see the references for more information.
Debian Linux 4.0
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 amd64
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_amd64.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_amd64.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_amd64.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_amd64.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 mipsel
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_mipsel.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_mipsel.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_mipsel.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_mipsel.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 ia-32
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_i386.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_i386.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_i386.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_i386.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 arm
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_arm.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_arm.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_arm.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_arm.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 hppa
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_hppa.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_hppa.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_hppa.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_hppa.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 sparc
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_sparc.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_sparc.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_sparc.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_sparc.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 s/390
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_s390.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_s390.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_s390.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_s390.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 powerpc
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_powerpc.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_powerpc.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_powerpc.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_powerpc.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 alpha
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 ia-64
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_ia64.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_ia64.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_ia64.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_ia64.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 mips
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2400_1.2.2+cvs20060620-4+etch1_mips.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs 20060620-4+etch1_mips.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2500_1.1.0+cvs20060620-3+etch1_mips.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500_1.1.0+cvs 20060620-3+etch1_mips.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
Debian Linux 4.0 m68k
-
Debian rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1. 2.2+cvs20060620-4+etch1_all.deb -
Debian rt2500-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2500/rt2500-source_1. 1.0+cvs20060620-3+etch1_all.deb -
Debian rt2570-source_1.1.0+cvs20060620-3+etch1_all.deb
http://security.debian.org/pool/updates/main/r/rt2570/rt2570-source_1. 1.0+cvs20060620-3+etch1_all.deb
References
Multiple Ralinktech Wireless Drivers MAC/BSS/SSID Integer Overflow Vulnerability
References:
References:
- Vendor Homepage (Ralink Technology)
- Ralinktech wireless cards drivers vulnerability ([email protected] )