‘Marvell Driver Malformed Association Request Vulnerability’
Summary
‘
Credit:
‘The information has been provided by Laurent Butti and Julien Tinnes.’
Details
‘Vulnerable Systems:
* Linksys WAP4400N (firmware v1.2.14) with MARVELL 88W8361P-BEM1 chipset
The bug can be triggered thanks to a malformed association request which is typically too short (truncated). Any association request sent in the air by the attacker will be parsed by the access point wireless driver and thus may trigger some implementation bugs. This bug is only triggerable when the access point is in WEP mode and if the association request contains the WEP flag.
Impact:
Denial-of-service (reboot or hang-up) and possibly remote arbitrary code execution
CVE Information:
CVE-2008-4441‘