CVE-2007-2057 Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets.
HighCVSS 10.0
EPSS 19.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aircrack-ng airodump-ng | = 0.7 | No fix listed |
| debian/aircrack-ng(Debian:12) | < 1:0.7-3 | 1:0.7-3 |
| debian/aircrack-ng(Debian:13) | < 1:0.7-3 | 1:0.7-3 |
| debian/aircrack-ng(Debian:14) | < 1:0.7-3 | 1:0.7-3 |
References
- Debian Security Tracker CVE-2007-2057 vendor-advisory
- 34931 vdb-entry
- 24880 third-party-advisory vendor-advisory
- 24964 third-party-advisory
- 24982 third-party-advisory
- GLSA-200704-16 vendor-advisory
- 2584 third-party-advisory
- DSA-1280 vendor-advisory
- VU#349828 third-party-advisory us-government-resource
- www.nop-art.net exploit vendor-advisory
- 20070412 Aircrack-ng (airodump-ng) remote buffer overflow vulnerability mailing-list
- 23467 vdb-entry
- ADV-2007-1379 vdb-entry
- aircrackng-airodumpng-bo(33626) vdb-entry