CVE-2006-1385 - CVE House
Back to Database
Status published Medium CVE-2006-1385

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in...

Vulnerability Description

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-1385

Credits & Attribution

No credits recorded in the NVD database.

References

More from kismac

View All →
CVE-2003-0704
KisMAC before 0.05d trusts user-supplied variables when chown'ing files or...
High 7.2
CVE-2003-0703
KisMAC before 0.05d trusts user-supplied variables to load arbitrary kernels...
High 7.2
CVE-2002-2242
The Apple Package Manager in KisMAC 0.02a and earlier modifies...
Medium 6.4

Affected Vendor

Affected Software

kismac
Vulnerable Versions:
0.1a, 0.1b, 0.1c, 0.2a, 0.5d, 0.5d4, 0.10a, 0.11a, 0.12a

Timeline

Official Publish: March 24th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.