CGISecurity Logo

Remote buffer overflow bug bites Linux Kernel Driver Wrapper

"A remote buffer overflow vulnerability in the Linux Kernel could be
exploited by attackers to execute code or cripple affected systems,
according to a Gentoo bug report that just became public.

The flaw could allow malicious hackers to launch arbitrary code with
kernel-level privileges.  This could lead to complete system compromise
or, in some cases if an exploit fails, result in denial-of-service
attacks.

This from the Gentoo bug report:

  • Anders Kaseorg discovered that ndiswrapper
    did not correctly handle long ESSIDs. If ndiswrapper is in use, a
    physically near-by attacker could generate specially crafted wireless
    network traffic and crash the system, leading to a denial of service."

Read more: http://blogs.zdnet.com/security/?p=2121