Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:13832
HistoryAug 10, 2006 - 12:00 a.m.

Intel® PROSet/Wireless Software Local Information Disclosure

2006-08-1000:00:00
vulners.com
7

Intel® PROSet/Wireless Software Local Information Disclosure

Summary:
A security vulnerability exists in the Intel® PROSet/Wireless Software (PROSet application) because of insecure usage of shared memory allowing a person having access to the user's computer or malicious software installed on the user's computer to obtain access to users' wireless network security information.

Description:
A security vulnerability has been identified in Intel® PROSet/Wireless Software 7.x, 8.x, 9.x, and 10.x (PROSet application), which could be locally exploited by malicious users or software to obtain Wireless network security information such as WLAN pre-shared WEP key (all PROSet versions) and user authentication credentials (only PROSet 9.x and 10.x versions). This flaw is due to insecure usage of the shared memory.

Affected products:
Product Application Versions Affected Versions
Intel® PRO/Wireless 2100 Network Connection Intel® PROSet 7 All Prior to 7.1.4.6
Intel® PRO/Wireless 2200BG Network Connection Intel® PROSet/Wireless 8, 9, 10 All Prior to 10.5
Intel® PRO/Wireless 2915ABG Network Connection Intel® PROSet/Wireless 9, 10 All Prior to 10.5
Intel® PRO/Wireless 3945ABG Network Connection Intel® PROSet/Wireless 10 All Prior to 10.5
Note: The 10.x software releases support all products which are supported by the 8.x and 9.x releases and is a direct replacement for these releases.

Applications written to the Intel® PRO/Wireless Network Connection Software API which utilize the API to apply WLAN profiles are also affected by this vulnerability. Intel recommends customers contact their OEM for an updated version of the OEM's WLAN application.

Recommendations:
This issue has been reported publicly with demonstration code. Intel recommends that users update the Intel® PROSet/Wireless Software. In order to determine the version of Intel® PROSet/Wireless Software you have installed on your system, open the PROSet main page and select Help ? About from the menu bar on the top of the page.

The following URL contains links to the software release which resolves the vulnerability: http://support.intel.com/support/wireless/wlan/sb/cs-010623.htm

Acknowledgements:
Intel would like to thank Rubén Santamarta for working with us.

Related Information:
Original disclosure http://www.reversemode.com/index.php?option=com_content&task=view&id=10&Itemid=1

BugTraq Mailing List, Tue May 02 2006 - 13:59:54 CDT, Intel wireless service s24evmon.exe confidential information disclosure. at http://archives.neohapsis.com/archives/bugtraq/2006-05/0116.html. †

FrSIRT Security Advisory FrSIRT/ADV-2006-1737, Intel PROset/Wireless Software Insecure Shared Section Information Disclosure at http://www.frsirt.com/english/advisories/2006/1737. †

Revision history:
Revision Date Description
1.0 7-28-2006 Initial public release.
CVE name: CVE-2006-2316 †

† This link will take you off of the Intel Web site. Intel does not control the content of the destination Web Site.

Disclaimer:
INFORMATION IN THIS DOCUMENT IS PROVIDED 'AS IS' IN CONNECTION WITH INTEL® PRODUCTS. YOUR USE OF THE INFORMATION IN THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. INTEL RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.

EXCEPT AS PROVIDED IN INTEL'S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, INTEL ASSUMES NO LIABILITY WHATSOEVER, AND INTEL DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF INTEL PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT.

Copyright © 2006, Intel Corporation

Related for SECURITYVULNS:DOC:13832