National Cyber-Alert System

Vulnerability Summary for CVE-2004-0459

Overview

The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#106678

Name: VU#106678

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/106678

External Source: AUSCERT

Name: AA-2004.02

Type: Advisory

Hyperlink:http://www.auscert.org.au/render.html?it=4091

External Source: XF

Name: ieee80211-cca-dos(16138)

Hyperlink:http://xforce.iss.net/xforce/xfdb/16138

External Source: BID

Name: 10342

Hyperlink:http://www.securityfocus.com/bid/10342

External Source: OSVDB

Name: 16034

Hyperlink:http://www.osvdb.org/16034

External Source: MISC

Name: http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf

External Source: SECTRACK

Name: 1010152

Hyperlink:http://securitytracker.com/id?1010152

External Source: FULLDISC

Name: 20040513 802.11b (others) single packet DoS

Hyperlink:http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html