Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.

The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings.
(CVE-2008-4395)

It was discovered that the Linux kernel could be made to hang temporarily when mounting corrupted ext2/3 filesystems. If a user were tricked into mounting a specially crafted filesystem, a remote attacker could cause system hangs, leading to a denial of service.
(CVE-2008-3528)

Anders Kaseorg discovered that ndiswrapper did not correctly handle long ESSIDs. For a system using ndiswrapper, a physically near-by attacker could generate specially crafted wireless network traffic and execute arbitrary code with root privileges. (CVE-2008-4395).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-662-1 fixed vulnerabilities in ndiswrapper in Ubuntu 8.10. This update provides the corresponding updates for Ubuntu 8.04 and 7.10.

Anders Kaseorg discovered that ndiswrapper did not correctly handle long ESSIDs. For a system using ndiswrapper, a physically near-by attacker could generate specially crafted wireless network traffic and execute arbitrary code with root privileges. (CVE-2008-4395).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Anders Kaseorg discovered that ndiswrapper suffers from buffer overflows via specially crafted wireless network traffic, due to incorrectly handling long ESSIDs. This could lead to the execution of arbitrary code.

The remote host is affected by the vulnerability described in GLSA-200901-01 (NDISwrapper: Arbitrary remote code execution)

    Anders Kaseorg reported multiple buffer overflows related to long     ESSIDs.
  Impact :

    A physically proximate attacker could send packets over a wireless     network that might lead to the execution of arbitrary code with root     privileges.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
51757	SuSE 10 Security Update : ndiswrapper (ZYPP Patch Number 5834)	Nessus	SuSE Local Security Checks	high
41259	SuSE9 Security Update : ndiswrapper (YOU Patch Number 12315)	Nessus	SuSE Local Security Checks	high
40078	openSUSE Security Update : ndiswrapper (ndiswrapper-351)	Nessus	SuSE Local Security Checks	high
37499	Ubuntu 8.10 : linux vulnerability (USN-662-1)	Nessus	Ubuntu Local Security Checks	high
37161	Ubuntu 7.10 / 8.04 LTS : linux-ubuntu-modules-2.6.22/24 vulnerability (USN-662-2)	Nessus	Ubuntu Local Security Checks	high
35762	Debian DSA-1731-1 : ndiswrapper - buffer overflow	Nessus	Debian Local Security Checks	high
35345	GLSA-200901-01 : NDISwrapper: Arbitrary remote code execution	Nessus	Gentoo Local Security Checks	high
35039	openSUSE 10 Security Update : ndiswrapper (ndiswrapper-5833)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2008-4395

critical

Tenable Plugins

high

high

high

high

high

high

high

high