Submitted by KeesCook on Tue, 2007-01-09 12:07
Referenced CVEs:
CVE-2006-6332
Description:
===========================================================
Ubuntu Security Notice USN-404-1 January 09, 2007
linux-restricted-modules-2.6.17 vulnerability
CVE-2006-6332
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.10:
linux-restricted-modules-2.6.17-10-386 2.6.17.7-10.1
linux-restricted-modules-2.6.17-10-generic 2.6.17.7-10.1
linux-restricted-modules-2.6.17-10-powerpc 2.6.17.7-10.1
linux-restricted-modules-2.6.17-10-powerpc-smp 2.6.17.7-10.1
linux-restricted-modules-2.6.17-10-powerpc64-smp 2.6.17.7-10.1
linux-restricted-modules-2.6.17-10-sparc64 2.6.17.7-10.1
linux-restricted-modules-2.6.17-10-sparc64-smp 2.6.17.7-10.1
After a standard system upgrade you need to reboot your computer to
effect the necessary changes.
Details follow:
Laurent Butti, Jerome Razniewski, and Julien Tinnes discovered that the
MadWifi wireless driver did not correctly check packet contents when
receiving scan replies. A remote attacker could send a specially
crafted packet and execute arbitrary code with root privileges.


