Buggy WLAN device drivers threaten laptops

By John Cox, NetworkWorld.com, 06/22/06

Two security researchers have discovered a way to exploit buggy code in a range of WLAN device drivers and seize control of a laptop PC.

Even worse, the laptop doesn't even have to be associated with a WLAN: just having the wireless NIC turned on is enough.

The two researchers used an open-source 802.11 hacking tool called LORCON to throw zillions of wireless packets at different wireless cards, a hacker technique called fuzzing. The attack can cause programs to fail, or perhaps even run unauthorized software when they are bombarded with unexpected data.

The two men aren't releasing details until they make a full presentation at the Black Hat USA conference, which starts July 29.

From what I can tell, LORCON was developed by Mike Schiffman and Aruba's Joshua Wright. SecurityFocus has a brief posting on it, with a link to the download site. But you apparently have to register first on the homepage.

Posters at Slashdot are not happy with the prospect of updating device drivers.

Back to Wireless Notes

Comments

Post a comment

Name:


E-mail address:


URL:


Comments:


Remember info?