Debian Project

Debian testing security team - Advisory

DTSA-35-1

Date Reported:
May 16th, 2007
Affected Package:
aircrack-ng
Vulnerability:
programming error
Problem-Scope:
remote
Debian-specific:
No
CVE:
CVE-2007-2057

More information:
It was discovered that aircrack-ng, a WEP/WPA security analysis tool, performs  
insufficient validation of 802.11 authentication packets, which allows the  
execution of arbitrary code. 

For the testing distribution (lenny) this is fixed in version 1:0.8-0.1lenny1
For the unstable distribution (sid) this is fixed in version 1:0.7-3

This upgrade is recommended if you use aircrack-ng.

If you have the secure testing lines in your sources.list, you can update by running this command as root:
apt-get update && apt-get install aircrack-ng


To use the Debian testing security archive, add the following lines to your /etc/apt/sources.list:

deb http://security.debian.org/ testing/updates main contrib non-free
deb-src http://security.debian.org/ testing/updates main contrib non-free


Valid HTML 4.01! Valid CSS!