Network World
Monday, October 6, 2008
DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Buggy WLAN device drivers threaten laptops

Related links

Wireless Notes RSS feed

E-mail John Cox

Wireless Notes archive.

Security forum
Discuss Wireless Notes and other Wireless/Mobile topics.


Two security researchers have discovered a way to exploit buggy code in a range of WLAN device drivers and seize control of a laptop PC.


Even worse, the laptop doesn't even have to be associated with a WLAN: just having the wireless NIC turned on is enough.

The two researchers used an open-source 802.11 hacking tool called LORCON to throw zillions of wireless packets at different wireless cards, a hacker technique called fuzzing. The attack can cause programs to fail, or perhaps even run unauthorized software when they are bombarded with unexpected data.

The two men aren't releasing details until they make a full presentation at the Black Hat USA conference, which starts July 29.

From what I can tell, LORCON was developed by Mike Schiffman and Aruba's Joshua Wright. SecurityFocus has a brief posting on it, with a link to the download site. But you apparently have to register first on the homepage.


Posters at Slashdot are not happy with the prospect of updating device drivers.

Back to Wireless Notes

Comments

Post a comment

Name:


E-mail address:


URL:


Comments:


Remember info?




Network World Newsletter

Sign up for some of our Wireless & Mobile newsletters.

Wireless Alert
Cool Tools alert
Network World Daily
 All newsletters  

E-mail Address: