Test ID:	1.3.6.1.4.1.25623.1.0.59168
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-479-1 (linux-restricted-modules-2.6.15/.17/.20)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to linux-restricted-modules-2.6.15/.17/.20 announced via advisory USN-479-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: Multiple flaws in the MadWifi driver were discovered that could lead to a system crash. A physically near-by attacker could generate specially crafted wireless network traffic and cause a denial of service. (CVE-2006-7177, CVE-2006-7178, CVE-2006-7179, CVE-2007-2829, CVE-2007-2830) A flaw was discovered in the MadWifi driver that would allow unencrypted network traffic to be sent prior to finishing WPA authentication. A physically near-by attacker could capture this, leading to a loss of privacy, denial of service, or network spoofing. (CVE-2006-7180) A flaw was discovered in the MadWifi driver's ioctl handling. A local attacker could read kernel memory, or crash the system, leading to a denial of service. (CVE-2007-2831) Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: linux-restricted-modules-2.6.15-28-386 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-686 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-amd64-generic 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-amd64-k8 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-amd64-xeon 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-k7 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-powerpc 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-powerpc-smp 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-sparc64 2.6.15.12-28.2 linux-restricted-modules-2.6.15-28-sparc64-smp 2.6.15.12-28.2 Ubuntu 6.10: linux-restricted-modules-2.6.17-11-386 2.6.17.8-11.2 linux-restricted-modules-2.6.17-11-generic 2.6.17.8-11.2 linux-restricted-modules-2.6.17-11-powerpc 2.6.17.8-11.2 linux-restricted-modules-2.6.17-11-powerpc-smp 2.6.17.8-11.2 linux-restricted-modules-2.6.17-11-powerpc64-smp 2.6.17.8-11.2 linux-restricted-modules-2.6.17-11-sparc64 2.6.17.8-11.2 linux-restricted-modules-2.6.17-11-sparc64-smp 2.6.17.8-11.2 Ubuntu 7.04: linux-restricted-modules-2.6.20-16-386 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-generic 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-lowlatency 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-powerpc 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-powerpc-smp 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-powerpc64-smp 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-sparc64 2.6.20.5-16.29 linux-restricted-modules-2.6.20-16-sparc64-smp 2.6.20.5-16.29 After a standard system upgrade you need to reboot your computer to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-479-1 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-7177 BugTraq ID: 23433 http://www.securityfocus.com/bid/23433 Bugtraq: 20070423 FLEA-2007-0012-1: madwifi (Google Search) http://www.securityfocus.com/archive/1/466689/30/6900/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2007:082 http://madwifi.org/ticket/880 http://secunia.com/advisories/24841 http://secunia.com/advisories/25861 http://secunia.com/advisories/26083 SuSE Security Announcement: SUSE-SR:2007:014 (Google Search) http://www.novell.com/linux/security/advisories/2007_14_sr.html http://www.ubuntu.com/usn/usn-479-1 Common Vulnerability Exposure (CVE) ID: CVE-2006-7178 BugTraq ID: 23431 http://www.securityfocus.com/bid/23431 http://security.gentoo.org/glsa/glsa-200704-15.xml http://secunia.com/advisories/24670 http://secunia.com/advisories/24931 http://www.vupen.com/english/advisories/2007/1187 Common Vulnerability Exposure (CVE) ID: CVE-2006-7179 BugTraq ID: 23436 http://www.securityfocus.com/bid/23436 http://dev.lintrack.org/ticket/101 http://www.osvdb.org/34645 Common Vulnerability Exposure (CVE) ID: CVE-2006-7180 BugTraq ID: 23434 http://www.securityfocus.com/bid/23434 XForce ISS Database: madwifi-wpa-weak-security(33514) https://exchange.xforce.ibmcloud.com/vulnerabilities/33514 Common Vulnerability Exposure (CVE) ID: CVE-2007-2829 BugTraq ID: 24114 http://www.securityfocus.com/bid/24114 Bugtraq: 20070606 FLEA-2007-0021-2: madwifi (Google Search) http://www.securityfocus.com/archive/1/470674/100/100/threaded http://security.gentoo.org/glsa/glsa-200706-04.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:132 http://osvdb.org/36635 http://secunia.com/advisories/25339 http://secunia.com/advisories/25622 http://secunia.com/advisories/25763 http://www.vupen.com/english/advisories/2007/1919 XForce ISS Database: madwifi-fastframe-dos(34455) https://exchange.xforce.ibmcloud.com/vulnerabilities/34455 Common Vulnerability Exposure (CVE) ID: CVE-2007-2830 http://osvdb.org/36636 XForce ISS Database: madwifi-athbeaconconfig-dos(34451) https://exchange.xforce.ibmcloud.com/vulnerabilities/34451 Common Vulnerability Exposure (CVE) ID: CVE-2007-2831 http://osvdb.org/36637 XForce ISS Database: madwifi-ieee80211ioctlgetwmmparams-dos(34453) https://exchange.xforce.ibmcloud.com/vulnerabilities/34453
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.