CVE-2006-6332
MadWifi - Stack-Based Buffer Overflow in IEEE80211 Wireless Component
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-6332. PoCs published by Metasploit, Massimiliano Oldani, Julien Tinnes.
AI-analyzed exploit summary This is a Metasploit module exploiting a remote kernel-mode stack-based buffer overflow in the Madwifi driver (CVE-2006-6332). It crafts malicious beacon frames to trigger the vulnerability in the `giwscan_cb` function, leading to arbitrary code execution on vulnerable Linux systems.
Description
Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions.
Exploits (3)
This is a Metasploit module exploiting a remote kernel-mode stack-based buffer overflow in the Madwifi driver (CVE-2006-6332). It crafts malicious beacon frames to trigger the vulnerability in the `giwscan_cb` function, leading to arbitrary code execution on vulnerable Linux systems.
This exploit targets a kernel buffer overflow in madwifi's WPA/RSN IE handling (CVE-2006-6332). It crafts a malicious 802.11 beacon frame with an oversized WPA Information Element to trigger the vulnerability, achieving remote code execution in kernel context via a connect-back shellcode.
This exploit targets a remote kernel-mode stack-based buffer overflow in the Madwifi driver (CVE-2006-6332) by sending malicious beacon frames. It achieves reliable remote code execution on vulnerable Linux systems with Madwifi versions prior to 0.9.2.1.