• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Kismet ESSID Remote Command Execution Vulnerability

Kismet is a freely available, open source software package maintained by the Kismet Project.

A maliciously formatted ESSID may make it possible for a remote user to execute arbitrary commands. The SayText() function of Kismet passes text directly to the shell of the executing user. By embedding commands with backticks in data sent via SayText(), a user may be able to execute commands.