WIDZ Remote Root Compromise Vulnerability

WIDZ does not validate untrusted input when generating alerts. Alerts pass the essid of an unknown wireless access point through a system() call. By setting the essid of an unauthorized access point to include malformed information, the underlying operating system may be compromised.


 

Privacy Statement
Copyright 2010, SecurityFocus