Re: Bug#446824: CVE-2007-5448 remote denial of service via crafted beacon frame

2007-12-29 Thread Luk Claes
Faidon Liambotis wrote: > Luk Claes wrote: >>> CVE-2007-5448[0]: >>> | Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial >>> | of service (panic) via a beacon frame with a large length value in the >>> | extended supported rates (xrates) element, which triggers an assertion >>>

Re: CVE-2007-5448 remote denial of service via crafted beacon frame

2007-12-29 Thread Faidon Liambotis
Luk Claes wrote: >> CVE-2007-5448[0]: >> | Madwifi 0.9.3.2 and earlier allows remote attackers to cause a denial >> | of service (panic) via a beacon frame with a large length value in the >> | extended supported rates (xrates) element, which triggers an assertion >> | error, related to net80211/ie

Re: CVE-2007-5448 remote denial of service via crafted beacon frame

2007-12-29 Thread Luk Claes
On Tue, Oct 16, 2007 at 12:37:31AM +0200, Nico Golde wrote: > Package: madwifi-source > Severity: grave > Tags: security patch > > Hi, > the following CVE (Common Vulnerabilities & Exposures) id was > published for madwifi-source. > > CVE-2007-5448[0]: > | Madwifi 0.9.3.2 and earlier allows remot