Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-1197

Overview

Vulnerability Score 6.3 6.3
CVE Id CVE-2008-1197
Last Modified 19 Aug 2009 01:12:41
Published 05 Sep 2008 12:08:00
Confidentiality Impact NONE NONE
Integrity Impact NONE NONE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication SINGLE_INSTANCE

CVE-2008-1197

Summary

The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset does not properly parse the SSID information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via a "Null SSID."

Vulnerable Systems


References

XF - netgear-wn802t-ssid-dos(44918)

BID - 30976

BUGTRAQ - 20080904 Marvell Driver Null SSID Association Request Vulnerability

SREASON - 4215

SECUNIA - 31770


Last Updated: 27 May 2016 10:47:04