Published: 2006-11-13
UPDATE: The Month of Kernel Bugs (MoKB) project announced on Saturday a flaw in the wireless drivers used by the popular Broadcom networking hardware installed on many Windows laptops.
The vulnerability occurs because of the drivers' incorrect handling of overly long service set identifier (SSID) strings, according to an advisory posted on the Month of Kernel Bugs blog site.
The driver, named BCMWL5.SYS, comes installed on PCs from Dell, eMachines, and Gateway as well as other computer manufacturers, stated a joint advisory penned by The Metasploit Project, the Internet Storm Center, SecuriTeam, and the Zero-day Emergency Response Team (ZERT). ZERT, which as released third-party patches for critical issues, will not release a fix this time.
"Although most of these vendors and manufacturers use the same basic driver, it differs enough that in most cases a single patch just won't cut it," the group said in its advisory. "Further, building a patch for all the different drivers from each vendor and all their versions, as well as test against them, is impractical."
The flaw was found by Jonathan Ellch, a former graduate student at the Naval Postgraduate School in Monterey, Calif. and one of two researchers that gave a controversial presentation on wireless flaws at the Black Hat Briefings in August. Increasingly, flaw finders are targeting drivers and client-side applications to find exploitable software flaws.
Broadcom has issued a general fix for the problem to their partners, according to the ZERT advisory. Those partners will have to issue specific fixes for the PC affected. The Month of Kernel Bugs project disclosed a flaw in an older version of Apple's wireless drivers earlier this month and found by the Metasploit Project.
Monday afternoon, the Month of Kernel Bugs project released another flaw in a wireless driver, this time in the driver for D-Link's USB wireless device, the DWL-G132.
UPDATE: The news brief was updated with information about the D-Link DWL-G132 flaw disclosed by the Month of Kernel Bugs project.
Posted by: Robert Lemos
