Integer overflow in Ralink Technology USB wireless adapter (RT73) 3.08 for Windows, and other wireless card drivers including rt2400, rt2500, rt2570, and rt61, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Probe Request packet with a long SSID, possibly related to an integer signedness error.

The remote host is affected by the vulnerability described in GLSA-200907-08 (Multiple Ralink wireless drivers: Execution of arbitrary code)

    Aviv reported an integer overflow in multiple Ralink wireless card     drivers when processing a probe request packet with a long SSID,     possibly related to an integer signedness error.
  Impact :

    A physically proximate attacker could send specially crafted packets to     a user who has wireless networking enabled, possibly resulting in the     execution of arbitrary code with root privileges.
  Workaround :

    Unload the kernel modules.

It was discovered that an integer overflow in the 'Probe Request' packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code.

Please note that you need to rebuild your driver from the source package in order to set this update into effect. Detailed instructions can be found in /usr/share/doc/rt2570-source/README.Debian

It was discovered that an integer overflow in the 'Probe Request' packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code.

Please note that you need to rebuild your driver from the source package in order to set this update into effect. Detailed instructions can be found in /usr/share/doc/rt2500-source/README.Debian

It was discovered that an integer overflow in the 'Probe Request' packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code.

Please note that you need to rebuild your driver from the source package in order to set this update into effect. Detailed instructions can be found in /usr/share/doc/rt2400-source/README.Debian

ID	Name	Product	Family	Severity
39779	GLSA-200907-08 : Multiple Ralink wireless drivers: Execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
35549	Debian DSA-1714-1 : rt2570 - integer overflow	Nessus	Debian Local Security Checks	high
35548	Debian DSA-1713-1 : rt2500 - integer overflow	Nessus	Debian Local Security Checks	high
35547	Debian DSA-1712-1 : rt2400 - integer overflow	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2009-0282

critical

Tenable Plugins

high

high

high

high