Executive Summary

Informations
Name CVE-2006-6332 First vendor Publication 2006-12-10
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score 7.5 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6332

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

OpenVAS Exploits

Date Description
2009-03-23 Name : Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1
File : nvt/gb_ubuntu_USN_404_1.nasl
2008-09-24 Name : Gentoo Security Advisory GLSA 200612-09 (madwifi-ng)
File : nvt/glsa_200612_09.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
31267 MadWifi ieee80211_wireless.c Multiple Function Overflow

A buffer overflow exists in MadWifi. The Atheros driver fails to validate data passed to the giwscan_cb() and encode_ie() functions resulting in a stack overflow. With a specially crafted 802.11 beacon or probe response frame, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Metasploit Database

id Description
2006-12-08 Madwifi SIOCGIWSCAN Buffer Overflow

Nessus® Vulnerability Scanner

Date Description
2007-12-13 Name : The remote SuSE 10 host is missing a security-related patch.
File : suse_madwifi-2370.nasl - Type : ACT_GATHER_INFO
2007-11-10 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-404-1.nasl - Type : ACT_GATHER_INFO
2006-12-14 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200612-09.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://lists.immunitysec.com/pipermail/dailydave/2006-December/003888.html
http://madwifi.org/changeset/1842
http://madwifi.org/wiki/news/20061207/release-0-9-2-1-fixes-critical-security...
http://secunia.com/advisories/23277
http://secunia.com/advisories/23335
http://secunia.com/advisories/23694
http://security.gentoo.org/glsa/glsa-200612-09.xml
http://www.kb.cert.org/vuls/id/925529
http://www.novell.com/linux/security/advisories/2006_28_sr.html
http://www.novell.com/linux/security/advisories/2006_74_madwifi.html
http://www.securityfocus.com/bid/21486
http://www.ubuntu.com/usn/usn-404-1
http://www.vupen.com/english/advisories/2006/4901
https://exchange.xforce.ibmcloud.com/vulnerabilities/30800
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2024-11-28 23:18:48
  • Multiple Updates
2024-11-28 12:10:44
  • Multiple Updates
2021-05-04 12:04:57
  • Multiple Updates
2021-04-22 01:05:33
  • Multiple Updates
2020-05-23 00:18:47
  • Multiple Updates
2017-07-29 12:01:48
  • Multiple Updates
2016-04-26 15:23:25
  • Multiple Updates
2014-02-17 10:38:04
  • Multiple Updates
2013-05-11 11:16:03
  • Multiple Updates