The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings.
(CVE-2008-4395)

USN-662-1 fixed vulnerabilities in ndiswrapper in Ubuntu 8.10. This update provides the corresponding updates for Ubuntu 8.04 and 7.10.

Anders Kaseorg discovered that ndiswrapper did not correctly handle long ESSIDs. For a system using ndiswrapper, a physically near-by attacker could generate specially crafted wireless network traffic and execute arbitrary code with root privileges. (CVE-2008-4395).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

複数のバッファオーバーフローを修正するために、ndiswrapper が更新されました。長い ESSID 文字列を使用することで、これが接続されている WLAN で悪用される可能性があります。
(CVE-2008-4395)

Anders Kaseorg discovered that ndiswrapper suffers from buffer overflows via specially crafted wireless network traffic, due to incorrectly handling long ESSIDs. This could lead to the execution of arbitrary code.

It was discovered that the Linux kernel could be made to hang temporarily when mounting corrupted ext2/3 filesystems. If a user were tricked into mounting a specially crafted filesystem, a remote attacker could cause system hangs, leading to a denial of service.
(CVE-2008-3528)

Anders Kaseorg discovered that ndiswrapper did not correctly handle long ESSIDs. For a system using ndiswrapper, a physically near-by attacker could generate specially crafted wireless network traffic and execute arbitrary code with root privileges. (CVE-2008-4395).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ndiswrapper 已更新，修正了多個可使用長 ESSID 字串，並透過連線的 WLAN 進行惡意利用的緩衝區溢位問題。
(CVE-2008-4395)

ndiswrapper 已更新，修复了多个可使用长 ESSID 字符串，并通过连接的 WLAN 加以利用的缓冲区溢出。
(CVE-2008-4395)

The remote host is affected by the vulnerability described in GLSA-200901-01 (NDISwrapper: Arbitrary remote code execution)

    Anders Kaseorg reported multiple buffer overflows related to long     ESSIDs.
  Impact :

    A physically proximate attacker could send packets over a wireless     network that might lead to the execution of arbitrary code with root     privileges.
  Workaround :

    There is no known workaround at this time.

ID	名稱	產品	系列	已發布	已更新	嚴重性
35039	openSUSE 10 Security Update : ndiswrapper (ndiswrapper-5833)	Nessus	SuSE Local Security Checks	2008/12/5	2021/1/14	high
37161	Ubuntu 7.10 / 8.04 LTS : linux-ubuntu-modules-2.6.22/24 vulnerability (USN-662-2)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	high
51757	SuSE 10 セキュリティ更新：ndiswrapper（ZYPP パッチ番号 5834）	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
35762	Debian DSA-1731-1 : ndiswrapper - buffer overflow	Nessus	Debian Local Security Checks	2009/3/4	2021/1/4	high
37499	Ubuntu 8.10 : linux vulnerability (USN-662-1)	Nessus	Ubuntu Local Security Checks	2009/4/23	2021/1/19	high
51757	SuSE 10 安全性更新：ndiswrapper (ZYPP 修補程式編號 5834)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
51757	SuSE 10 安全更新：ndiswrapper（ZYPP 修补程序编号 5834）	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
51757	SuSE 10 Security Update : ndiswrapper (ZYPP Patch Number 5834)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
35345	GLSA-200901-01 : NDISwrapper: Arbitrary remote code execution	Nessus	Gentoo Local Security Checks	2009/1/12	2021/1/6	high
40078	openSUSE Security Update : ndiswrapper (ndiswrapper-351)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	high
41259	SuSE9 Security Update : ndiswrapper (YOU Patch Number 12315)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high