Apple Mac OS X WLAN Roaming with Disabled MCS Denial of Service Vulnerability

Bugtraq ID:	45627
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 30 2010 12:00AM
Updated:	Dec 30 2010 12:00AM
Credit:	Attilla de Groot
Vulnerable:	Apple Mac OS X 10.6.5
Not Vulnerable:

Apple Mac OS X WLAN Roaming with Disabled MCS Denial of Service Vulnerability

Apple Mac OS X is prone to a remote denial-of-service vulnerability when roaming between wireless networks.

Attackers can exploit this issue to cause the kernel to panic, denying service to legitimate users.

The issue may be limited to unibody Macbook laptops running AirPort Extreme wireless interfaces with Broadcom BCM43xx 1.0 (5.10.131.36.1) firmware; this has not been confirmed.

Mac OS X 10.6.5 is vulnerable.

Apple Mac OS X WLAN Roaming with Disabled MCS Denial of Service Vulnerability

Attackers can exploit this issue with readily available tools.

Apple Mac OS X WLAN Roaming with Disabled MCS Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X WLAN Roaming with Disabled MCS Denial of Service Vulnerability

References:

• Mac OS X Homepage (Apple)