Compaq Intel PRO/Wireless 2011B LAN USB Device Driver Information Disclosure Vulnerability
BID:3968
Info
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver Information Disclosure Vulnerability
| Bugtraq ID: | 3968 |
| Class: | Design Error |
| CVE: |
CVE-2002-0214 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 28 2002 12:00AM |
| Updated: | Jul 11 2009 09:56AM |
| Credit: | This vulnerability was submitted to BugTraq on January 28th, 2002 by dario luethi <[email protected]>. |
| Vulnerable: |
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.18 .0 Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16 .0 |
| Not Vulnerable: | |
Discussion
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver Information Disclosure Vulnerability
Compaq's Intel PRO/Wireless 2011B LAN USB Device driver allows a user to connect a number of supported WLAN Ethernet devices via a USB port. It runs on Microsoft Windows platforms that support USB, such as Windows 98/ME/2000.
The Compaq Intel PRO/Wireless 2011B LAN USB Device driver may disclose sensitive information to local attackers. The 128-bit WEP (Wired Equivalent Privacy) Key is stored plaintext in the registry and may be viewed by unprivileged local users.
The WEP Key may be used by the local attacker to decrypt all network traffic encapsulated in WEP.
Compaq's Intel PRO/Wireless 2011B LAN USB Device driver allows a user to connect a number of supported WLAN Ethernet devices via a USB port. It runs on Microsoft Windows platforms that support USB, such as Windows 98/ME/2000.
The Compaq Intel PRO/Wireless 2011B LAN USB Device driver may disclose sensitive information to local attackers. The 128-bit WEP (Wired Equivalent Privacy) Key is stored plaintext in the registry and may be viewed by unprivileged local users.
The WEP Key may be used by the local attacker to decrypt all network traffic encapsulated in WEP.
Exploit / POC
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver Information Disclosure Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver Information Disclosure Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Compaq Intel PRO/Wireless 2011B LAN USB Device Driver Information Disclosure Vulnerability
References:
References:
- Compaq Software And Drivers Support Page (Compaq)
- Intel PRO/Wireless 2011B LAN USB Device Product Page (Intel Corporation)