Skip to Content.
Sympa Menu

sm-security - [SM-Security] Kismet: several vunerabilities

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] Kismet: several vunerabilities
  • Date: Wed, 24 Aug 2005 23:36:25 +0200

Synopsis
========
Kismet is vulnerable to multiple issues potentially resulting in the
execution of arbitrary code.

Background
==========
Kismet is an 802.11 wireless network sniffer.

Description
===========

* Bad handling of unprintable characters in the SSID.

* Integer underflows in pcap handling. They could cause heap
corruption/exploitation on replaying a pcapfile w/ kernel headers.

* Integer underflow in data frame dissection. Thiscould lead to heap
exploits with malformed remote data.

Impact
======
With a specially crafted packet an attacker could cause Kismet to
execute arbitrary code with the rights of the user running the program.

Affected packages
=================
kismet in devel, test stable-rc 0.2 and stabe-0.1 grimoires is affected.
This is now fixed in all grimoires.

Resolution
==========
All kismet users should upgrade to the latest available version:
# scribe update
# cast -c kismet

References
==========
[ 1 ] Kismet Web Site
http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt

[ 2 ] GLSA 200508-10
http://security.gentoo.org/glsa/glsa-200508-10.xml

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] Kismet: several vunerabilities, Thomas Houssin, 08/24/2005

Archive powered by MHonArc 2.6.24.

Top of Page