CVE-2006-6059

Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (1) beacon or (2) probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a "memory corruption" error, but the associated exploit code suggests that it is a buffer overflow.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://projects.info-pull.com/mokb/MOKB-18-11-2006.html	Exploit Vendor Advisory
http://www.kb.cert.org/vuls/id/395496	US Government Resource
http://securitytracker.com/id?1017254	Exploit
http://secunia.com/advisories/23036	Vendor Advisory
http://www.securityfocus.com/bid/21175
http://www.vupen.com/english/advisories/2006/4604
https://exchange.xforce.ibmcloud.com/vulnerabilities/30442

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:netgear:ma521_driver:*:*:*:*:*:*:*:*

Information

Published : 2006-11-21 17:07

Updated : 2017-07-19 18:34

NVD link : CVE-2006-6059

Mitre link : CVE-2006-6059

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

netgear

ma521_driver

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://projects.info-pull.com/mokb/MOKB-18-11-2006.html", "name": "http://projects.info-pull.com/mokb/MOKB-18-11-2006.html", "tags": ["Exploit", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.kb.cert.org/vuls/id/395496", "name": "VU#395496", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://securitytracker.com/id?1017254", "name": "1017254", "tags": ["Exploit"], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/23036", "name": "23036", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/21175", "name": "21175", "tags": [], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2006/4604", "name": "ADV-2006-4604", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30442", "name": "netgear-ma521-code-execution(30442)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (1) beacon or (2) probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a \"memory corruption\" error, but the associated exploit code suggests that it is a buffer overflow."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-6059", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2006-11-22T01:07Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:netgear:ma521_driver:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "5.148.724.2003"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:34Z"}