Major flaw found in Wi-Fi Linux

Researcher held back news until patch was released

Written by Iain Thomson

A major flaw that imperils Linux users of Wi-Fi has been found in the widely-used MadWiFi Linux kernel device driver for Atheros-based Wi-Fi chipsets.

The kernel stack-overflow bug could be used to take control of computers, even if they are not on a Wi-Fi network.

"You may be vulnerable if you do not manually patch your MadWi-Fi driver," Laurent Butti, a researcher from France Telecom Orange who discovered the issue, told the Washington Post.

Butti gave details of the flaw at last month's Black Hat Briefing convention, where security researchers and hackers meet to exchange ideas and information.

But the news was held back from general release until a patch had been built and distributed.

Butti found the flaw by 'fuzzing' the code. This involves feeding the software random data until it crashes and reveals a flaw.

He is now turning his attention to WiMax and wireless USB.

Tags:

reader comments

related articles

A flaw in the Linux kernel could be exploited by malicious users to cause a denial of service attack

DoS flaw hits Linux kernel

SCTP vulnerability could exhaust system resources 04 May 2006

 

JavaScript flaw threatens Firefox

Unpatched vulnerability could allow remote code execution 03 Oct 2006

Critical JavaScript flaw hits Firefox

Error could allow for remote exploits 26 Feb 2007

Skype patches Mac OS X security flaw

Vulnerability could allow for URL attacks 06 Oct 2006

Major DNS flaw revealed

Experts sound alarms over early disclosure 23 Jul 2008

Exploit emerges for DNS flaw

First attack tool created for vulnerability 25 Jul 2008

Cisco warns of new security risks

Attack can cripple Access Control Server and security appliances 05 Sep 2008

related whitepapers

today's top stories

IT's stock is soaring at the LSE

London Stock Exchange IT chief David Lester explains to Angelica Mari how the integration of Borsa Italiana is keeping his team busy, despite the worsening economy 20 Nov 2008

Keeping IT in fashion

John Bovill has been hooked on retail since his early years as a fashion market trader. His industry knowledge is now helping him build a slick IT operation, reports Charlotte Moore 20 Nov 2008

Cutting-edge IT delivers the goods

Chief technology officer Jay Bregman explains how constant innovation is part and parcel of his strategy for delivering competitive advantage at eCourier 20 Nov 2008

Computing podcast: Europol's data sharing woes; credit card protection at Cotton Traders

The pan-European fight against organised crime is undermined by lax data sharing arrangements; and Cotton Traders enhances its credit card protection 20 Nov 2008

Keeping IT on track

Catherine Doran, winner of Computing’s IT Leader of the Year award, tells Angelica Mari of her determination to drive on with technology-led transformation at Network Rail despite uncertainty over funding 19 Nov 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job

IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Will attempts to rebrand IT as a "cool" choice of profession increase the number of IT graduates?

Will attempts to rebrand IT as a "cool" choice of profession increase the number of IT graduates?

Can brand building reverse a decline in IT graduate numbers?

Previous poll results

Latest audio and video articles

Video

The definitive guide to converged communications

Five key trends and five best practice tips to help you improve your corporate communications 20 Nov 2008

PodcastAudio

Computing podcast: Europol's data sharing woes; credit card protection at Cotton Traders

The pan-European fight against organised crime is undermined by lax data sharing arrangements; and Cotton Traders enhances its credit card protection 20 Nov 2008

Latest in-depth articles

StarFeatures

Retaining the stars of IT

Jim Mortleman investigates the innovative techniques IT leaders are using to hang on to their star performers 20 Nov 2008

Dave BaileyComment

Clouds darken outlook for Vista's successor

Windows 7 looks like being an improvement on Vista, but economic and environmental concerns may mean few enterprises will rush to adopt it 20 Nov 2008

Advertisement

Primary Navigation