Aruba Mobility Controller 802.11 Probe Request Frame Remote Denial of Service Vulnerability

Bugtraq ID:	46092
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 01 2011 12:00AM
Updated:	Feb 01 2011 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Aruba Networks ArubaOS 3.4 .2 Aruba Networks ArubaOS 3.3.3 .2 Aruba Networks ArubaOS 3.3.3 .0 Aruba Networks ArubaOS 3.3.2 6 Aruba Networks ArubaOS 3.3.2 .17 Aruba Networks ArubaOS 3.3.2 .11 Aruba Networks ArubaOS 3.3.1 .29 Aruba Networks ArubaOS 3.3.1 .24 Aruba Networks ArubaOS 3.3.1 Aruba Networks ArubaOS RN 3.1.4 Aruba Networks ArubaOS RN 3.1.1 Aruba Networks ArubaOS RN 3.1.0 Aruba Networks ArubaOS 5.0.0 Aruba Networks ArubaOS 3.4.2.0-FIPS Aruba Networks ArubaOS 3.3.2.14-FIPS Aruba Networks ArubaOS 3.3.2.13-FIPS Aruba Networks ArubaOS 3.3.2.0-FIPS
Not Vulnerable:	Aruba Networks ArubaOS RN3.1.12 Aruba Networks ArubaOS 5.0.2.0 Aruba Networks ArubaOS 3.4.2.6 Aruba Networks ArubaOS 3.4.2.3-FIPS Aruba Networks ArubaOS 3.3.3.8 Aruba Networks ArubaOS 3.3.2.20-FIPS

Aruba Mobility Controller 802.11 Probe Request Frame Remote Denial of Service Vulnerability

Aruba Mobility Controller is prone to a remote denial-of-service vulnerability.

A remote attacker can exploit this issue to cause the affected device to restart, denying service to legitimate users.

The following versions of ArubaOS in the Aruba Mobility Controller are affected:

3.3.1.x
3.3.2.x
3.3.3.X
3.4.2.X
5.0.X
RN 3.1.x
3.3.2.x-FIPS
3.4.2.x-FIPS

Aruba Mobility Controller 802.11 Probe Request Frame Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Aruba Mobility Controller 802.11 Probe Request Frame Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Aruba Mobility Controller 802.11 Probe Request Frame Remote Denial of Service Vulnerability

References:

• Aruba Mobility Controller Homepage (Aruba Networks)
  
• Aruba Mobility Controller - multiple advisories: DoS and authentication bypass (Aruba Networks)
  
• ADVISORY NUMBER 013111 (Aruba Networks)