CVE-2006-1385 - Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R

CVE-2006-1385

Summary

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame. Update to version R73p.

References

Vulnerable Configurations

cpe:2.3:a:kismac:kismac:0.1a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.1a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.1b:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.1b:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.1c:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.1c:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.2a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.2a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.5d:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.5d:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.5d4:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.5d4:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.10a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.10a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.11a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.11a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.12a:*:*:*:*:*:*:*
cpe:2.3:a:kismac:kismac:0.12a:*:*:*:*:*:*:*

CVSS

Base:	5.1 (as of 18-10-2018 - 16:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:P/A:P

refmap via4

bid	17198
bugtraq	20060323 Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow
confirm	http://kismac.de/_trac/changeset/113
fulldisc	20060323 Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow
misc	http://www.hardened-php.net/advisory_032006.115.html
osvdb	24072
secunia	19354
sreason	609
vupen	ADV-2006-1070
xf	kismac-80211-parsing-bo(25422)

Last major update

18-10-2018 - 16:32

Published

24-03-2006 - 11:02

Last modified

18-10-2018 - 16:32