exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Mandriva Linux Security Advisory 2012-168

Posted Oct 23, 2012

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2012-168 - hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials. Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service via a small TLS Message Length value in an EAP-TLS message with the More Fragments flag set. The updated packages have been patched to correct these issues.

tags | advisory, remote, denial of service, overflow, local

systems | linux, mandriva

advisories | CVE-2012-2389, CVE-2012-4445

SHA-256 | 512fb097516dbb480fe020de0a49132ae96ea386174115292dd9ee3c594eebc8

Download | Favorite | View

Related Files

No related files