Intel wimax-ns Multiple Security Vulnerabilities

Bugtraq ID:	61696
Class:	Unknown
CVE:	CVE-2013-4216 CVE-2013-4217 CVE-2013-4218 CVE-2013-4219
Remote:	Yes
Local:	Yes
Published:	Aug 08 2013 12:00AM
Updated:	Aug 08 2013 12:00AM
Credit:	Florian Weimer of Red Hat Product Security Team
Vulnerable:	Intel wimax-ns 0
Not Vulnerable:

Intel wimax-ns Multiple Security Vulnerabilities

wimax-ns is prone to multiple security vulnerabilities including;

1. An insecure file-permission issue
2. Multiple information-disclosure issues
3. Multiple buffer-overflow issues

Attackers can exploit these issues to disclose sensitive information and execute arbitrary code on the affected device. Failed exploit attempts will result in a denial-of-service condition.

Intel wimax-ns Multiple Security Vulnerabilities

An attacker can use readily available network utilities to exploit these issues.

Intel wimax-ns Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Intel wimax-ns Multiple Security Vulnerabilities

References:

• Bug 911121 - (CVE-2013-4217) CVE-2013-4217 wimax (OSAL crypt module): By setting (Red Hat Bugzilla)
  
• Bug 911122 - (CVE-2013-4216) CVE-2013-4216 wimax: Log file created with insecure (Red Hat Bugzilla)
  
• Bug 911126 - (CVE-2013-4218) CVE-2013-4218 wimax: Supplicant agent ships RSA pri (Red Hat Bugzilla)
  
• Bug 911129 - (CVE-2013-4219) CVE-2013-4219 wimax: Three integer overflows, leadi (Red Hat Bugzilla)
  
• Re: CVE Request -- Four flaws in WiMAX (afaik upstream is dead for this) (SecLists.Org)
  
• wimax-ns Homepage (GitHub)