National Cyber Awareness System

Vulnerability Summary for CVE-2008-4441

Overview

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, does not properly parse malformed 802.11 frames, which allows remote attackers to cause a denial of service (reboot or hang-up) via a malformed association request containing the WEP flag, as demonstrated by a request that is too short, a different vulnerability than CVE-2008-1144 and CVE-2008-1197.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: linksys-wap4400n-request-dos(45841)

Hyperlink:http://xforce.iss.net/xforce/xfdb/45841

External Source: VUPEN

Name: ADV-2008-2805

Hyperlink:http://www.vupen.com/english/advisories/2008/2805

External Source: BID

Name: 31742

Hyperlink:http://www.securityfocus.com/bid/31742

External Source: BUGTRAQ

Name: 20081013 Marvell Driver Malformed Association Request Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/497285/100/0/threaded

External Source: SREASON

Name: 4400

Hyperlink:http://securityreason.com/securityalert/4400

External Source: SECUNIA

Name: 32259

Type: Advisory

Hyperlink:http://secunia.com/advisories/32259