Lucene search

K
ubuntuUbuntuUSN-662-2
HistoryNov 06, 2008 - 12:00 a.m.

Ubuntu kernel modules vulnerability

2008-11-0600:00:00
ubuntu.com
31

6.8 Medium

AI Score

Confidence

Low

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.055 Low

EPSS

Percentile

93.1%

Releases

  • Ubuntu 8.04
  • Ubuntu 7.10

Packages

  • linux-ubuntu-modules-2.6.22 -
  • linux-ubuntu-modules-2.6.24 -

Details

USN-662-1 fixed vulnerabilities in ndiswrapper in Ubuntu 8.10.
This update provides the corresponding updates for Ubuntu 8.04 and 7.10.

Original advisory details:

Anders Kaseorg discovered that ndiswrapper did not correctly handle long
ESSIDs. For a system using ndiswrapper, a physically near-by attacker
could generate specially crafted wireless network traffic and execute
arbitrary code with root privileges. (CVE-2008-4395)

6.8 Medium

AI Score

Confidence

Low

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.055 Low

EPSS

Percentile

93.1%