Description
ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information (related to network structure), and possibly cause a denial of service (disrupted authentication) and conduct spoofing attacks.
References
- USN-479-1 vendor-advisory
- MDKSA-2007:082 vendor-advisory
- 24670 third-party-advisory
- 24931 third-party-advisory
- 26083 third-party-advisory
- ADV-2007-1187 vdb-entry
- SUSE-SR:2007:014 vendor-advisory
- http://madwifi.org/ticket/967
- madwifi-wpa-weak-security(33514) vdb-entry
- http://madwifi.org/wiki/Releases/0.9.3
- 24841 third-party-advisory
- 20070423 FLEA-2007-0012-1: madwifi mailing-list
- GLSA-200704-15 vendor-advisory
- 25861 third-party-advisory
- 23434 vdb-entry