CVE-2006-7178 - Vulnerability Details - OpenCVE

MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.06329.

Key SSVC decision points have not yet been added.

Vendors	Products
Madwifi Subscribe	Madwifi Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:madwifi:madwifi::::::::
	cpe:2.3:a:madwifi:madwifi::::::::

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2006-7160	MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame.
Ubuntu USN	USN-479-1	MadWifi vulnerabilities

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://madwifi.org/ticket/880
http://madwifi.org/wiki/Releases/0.9.3
http://secunia.com/advisories/24670
http://secunia.com/advisories/24841
http://secunia.com/advisories/24931
http://secunia.com/advisories/25861
http://secunia.com/advisories/26083
http://security.gentoo.org/glsa/glsa-200704-15.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:082
http://www.novell.com/linux/security/advisories/2007_14_sr.html
http://www.securityfocus.com/archive/1/466689/30/6900/threaded
http://www.securityfocus.com/bid/23431
http://www.ubuntu.com/usn/usn-479-1
http://www.vupen.com/english/advisories/2007/1187

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-03-30T01:00:00

Updated: 2024-08-07T20:57:41.045Z

Reserved: 2007-03-29T00:00:00

Link: CVE-2006-7178

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-03-30T01:19:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2006-7178

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

NVD-CWE-Other

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-09-14T00:00:00", "descriptions": [{"lang": "en", "value": "MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "USN-479-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-479-1"}, {"name": "23431", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23431"}, {"name": "MDKSA-2007:082", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082"}, {"name": "24670", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24670"}, {"name": "24931", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24931"}, {"name": "26083", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26083"}, {"name": "ADV-2007-1187", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1187"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://madwifi.org/ticket/880"}, {"name": "SUSE-SR:2007:014", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://madwifi.org/wiki/Releases/0.9.3"}, {"name": "24841", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24841"}, {"name": "20070423 FLEA-2007-0012-1: madwifi", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/466689/30/6900/threaded"}, {"name": "GLSA-200704-15", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200704-15.xml"}, {"name": "25861", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25861"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-7178", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "USN-479-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-479-1"}, {"name": "23431", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23431"}, {"name": "MDKSA-2007:082", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082"}, {"name": "24670", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24670"}, {"name": "24931", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24931"}, {"name": "26083", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26083"}, {"name": "ADV-2007-1187", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1187"}, {"name": "http://madwifi.org/ticket/880", "refsource": "CONFIRM", "url": "http://madwifi.org/ticket/880"}, {"name": "SUSE-SR:2007:014", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"}, {"name": "http://madwifi.org/wiki/Releases/0.9.3", "refsource": "CONFIRM", "url": "http://madwifi.org/wiki/Releases/0.9.3"}, {"name": "24841", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24841"}, {"name": "20070423 FLEA-2007-0012-1: madwifi", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/466689/30/6900/threaded"}, {"name": "GLSA-200704-15", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200704-15.xml"}, {"name": "25861", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25861"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T20:57:41.045Z"}, "title": "CVE Program Container", "references": [{"name": "USN-479-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-479-1"}, {"name": "23431", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/23431"}, {"name": "MDKSA-2007:082", "tags": ["vendor-advisory", "x_refsource_MANDRIVA", "x_transferred"], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082"}, {"name": "24670", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24670"}, {"name": "24931", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24931"}, {"name": "26083", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26083"}, {"name": "ADV-2007-1187", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/1187"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://madwifi.org/ticket/880"}, {"name": "SUSE-SR:2007:014", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://madwifi.org/wiki/Releases/0.9.3"}, {"name": "24841", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/24841"}, {"name": "20070423 FLEA-2007-0012-1: madwifi", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/466689/30/6900/threaded"}, {"name": "GLSA-200704-15", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200704-15.xml"}, {"name": "25861", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25861"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-7178", "datePublished": "2007-03-30T01:00:00", "dateReserved": "2007-03-29T00:00:00", "dateUpdated": "2024-08-07T20:57:41.045Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:madwifi:madwifi:*:*:*:*:*:*:*:*", "matchCriteriaId": "6960E4C4-F392-47FD-B334-6F840CE977EF", "versionEndIncluding": "0.9.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:madwifi:madwifi:*:*:*:*:*:*:*:*", "matchCriteriaId": "322E4516-03E5-44E3-9E5A-A4C8A628832D", "versionEndIncluding": "0.9.2.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service (system crash) via a certain AUTH frame."}, {"lang": "es", "value": "MadWifi anterior al 0.9.3 no maneja adecuadamente la recepci\u00f3n del marco AUTH por el nodo IBSS, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda del sistema) mediante ciertos marcos AUTH."}], "id": "CVE-2006-7178", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-03-30T01:19:00.000", "references": [{"source": "cve@mitre.org", "url": "http://madwifi.org/ticket/880"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://madwifi.org/wiki/Releases/0.9.3"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/24670"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/24841"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/24931"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/25861"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/26083"}, {"source": "cve@mitre.org", "url": "http://security.gentoo.org/glsa/glsa-200704-15.xml"}, {"source": "cve@mitre.org", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082"}, {"source": "cve@mitre.org", "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/466689/30/6900/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23431"}, {"source": "cve@mitre.org", "url": "http://www.ubuntu.com/usn/usn-479-1"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1187"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://madwifi.org/ticket/880"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://madwifi.org/wiki/Releases/0.9.3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24670"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24841"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/24931"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/25861"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/26083"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://security.gentoo.org/glsa/glsa-200704-15.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:082"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2007_14_sr.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/466689/30/6900/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/23431"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/usn-479-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/1187"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "Not vulnerable. The MadWiFi wireless driver is not shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.", "lastModified": "2007-04-17T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}