Microsoft Windows XP Wireless LAN AP Information Disclosure Vulnerability

Bugtraq ID:	6312
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 04 2002 12:00AM
Updated:	Dec 04 2002 12:00AM
Credit:	Discovery of this vulnerability credited to Nobuo Miwa <[email protected]>.
Vulnerable:	IEEE 802.11b + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional
Not Vulnerable:

Microsoft Windows XP Wireless LAN AP Information Disclosure Vulnerability

An information disclosure vulnerability has been reported for systems using the IEEE 802.11b standard for wireless communications.

An attacker can exploit this vulnerability to set up an AP with the same SSID (Service Set ID) of a previously configured AP. When the vulnerable system recognizes this malicious AP, it will then begin transmission of data.

This can be exploited by an attacker to intercept and decrypt any transmissions received from a vulnerable system. Information obtained in this manner may be used to launch further, destructive attacks against a vulnerable system.

** Microsoft has stated that this issue is not platform specific. Rather, it is an issue with the IEEE 802.11b standard.

Microsoft Windows XP Wireless LAN AP Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows XP Wireless LAN AP Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows XP Wireless LAN AP Information Disclosure Vulnerability

References:

• [SNS Advisory No.60 rev.2] Windows XP Disclosure of Registered AP Information ("[email protected]" )