Candidate: CVE-2008-4395 PublicDate: 2008-11-06 15:55:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4395 https://ubuntu.com/security/notices/USN-662-1 https://ubuntu.com/security/notices/USN-662-2 Description: Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs. Ubuntu-Description: Anders Kaseorg discovered that ndiswrapper did not correctly handle long ESSIDs. If ndiswrapper is in use, a physically near-by attacker could generate specially crafted wireless network traffic and crash the system, leading to a denial of service. Notes: Bugs: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/275860 Priority: low Discovered-by: Anders Kaseorg Assigned-to: smb_tp CVSS: Patches_linux-source-2.6.15: upstream_linux-source-2.6.15: needs-triage dapper_linux-source-2.6.15: not-affected (code not present) feisty_linux-source-2.6.15: DNE gutsy_linux-source-2.6.15: DNE hardy_linux-source-2.6.15: DNE intrepid_linux-source-2.6.15: DNE devel_linux-source-2.6.15: DNE Patches_linux-source-2.6.20: upstream_linux-source-2.6.20: needs-triage dapper_linux-source-2.6.20: DNE feisty_linux-source-2.6.20: not-affected (code not present) gutsy_linux-source-2.6.20: DNE hardy_linux-source-2.6.20: DNE intrepid_linux-source-2.6.20: DNE devel_linux-source-2.6.20: DNE Patches_linux-source-2.6.22: upstream_linux-source-2.6.22: needs-triage dapper_linux-source-2.6.22: DNE feisty_linux-source-2.6.22: DNE gutsy_linux-source-2.6.22: not-affected (code not present) hardy_linux-source-2.6.22: DNE intrepid_linux-source-2.6.22: DNE devel_linux-source-2.6.22: DNE Patches_linux: upstream_linux: needs-triage dapper_linux: DNE feisty_linux: DNE gutsy_linux: DNE hardy_linux: not-affected (code not present) intrepid_linux: released (2.6.27-7.16) devel_linux: not-affected Patches_linux-ubuntu-modules-2.6.22: upstream_linux-ubuntu-modules-2.6.22: needs-triage dapper_linux-ubuntu-modules-2.6.22: DNE feisty_linux-ubuntu-modules-2.6.22: DNE gutsy_linux-ubuntu-modules-2.6.22: released (2.6.22-15.40) hardy_linux-ubuntu-modules-2.6.22: DNE intrepid_linux-ubuntu-modules-2.6.22: DNE devel_linux-ubuntu-modules-2.6.22: DNE Patches_linux-ubuntu-modules-2.6.24: upstream_linux-ubuntu-modules-2.6.24: needs-triage dapper_linux-ubuntu-modules-2.6.24: DNE feisty_linux-ubuntu-modules-2.6.24: DNE gutsy_linux-ubuntu-modules-2.6.24: DNE hardy_linux-ubuntu-modules-2.6.24: released (2.6.24-21.33) intrepid_linux-ubuntu-modules-2.6.24: DNE devel_linux-ubuntu-modules-2.6.24: DNE