bugtraq - ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 31 Dec 2006 12:19:59 +0100
From: sapheal@...k.pl
To: bugtraq@...urityfocus.com
Subject: ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution

Synopsis:  ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution
Product:   ATMEL WLAN drivers 3.4.1.1
Version:   <=3.4.1.1

Product:
=======
ATMEL linux PCI, PCMCIA, USB drivers. and configuration utilities.

Issue:
======

A critical security vulnerability has been found in ATMEL WLAN drivers 3.4.1.1.
Arbitrary code execution is possible.

Details:
========
Function Get_Wep obtains WEP key information. However, the "cname"
variable value (fuction's argument) is copied to ifr_name (attribute
of IWREQ object) without the proper bounds-checking. It leads to 
memory corruption conditions.

Affected Versions
=================

ATMEL WLAN drivers 3.4.1.1

Kind regards,

Michał Bućko - sapheal
HACK.PL