CVE-2006-0226
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.084 Low
EPSS
Percentile
94.4%
Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted (1) beacon or (2) probe response frames.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 6.0 |
References
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:05.80211.asc
kernelwars.blogspot.com/2007/01/alive.html
secunia.com/advisories/18353
securitytracker.com/id?1015518
www.blackhat.com/html/bh-europe-07/bh-eu-07-speakers.html#Eriksson
www.osvdb.org/22537
www.securityfocus.com/bid/16296
www.signedness.org/advisories/sps-0x1.txt
exchange.xforce.ibmcloud.com/vulnerabilities/24192
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.084 Low
EPSS
Percentile
94.4%