Launchpad.net

CVE 2010-4648

The orinoco_ioctl_set_auth function in drivers/net/wireless/orinoco/wext.c in the Linux kernel before 2.6.37 does not properly implement a TKIP protection mechanism, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading Wi-Fi frames.

Related bugs and status

CVE-2010-4648 (Candidate) is related to these bugs:

Bug #917801: CVE-2010-4648

		In	Importance	Status
917801	CVE-2010-4648	linux (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-ec2 (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-ec2 (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux (Ubuntu Oneiric)	Medium	Won't Fix
917801	CVE-2010-4648	linux-ec2 (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Oneiric)	Medium	Won't Fix
917801	CVE-2010-4648	linux (Ubuntu Natty)	Medium	Won't Fix
917801	CVE-2010-4648	linux-ec2 (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Natty)	Medium	Won't Fix
917801	CVE-2010-4648	linux (Ubuntu Maverick)	Medium	Fix Released
917801	CVE-2010-4648	linux-ec2 (Ubuntu Maverick)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Maverick)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Maverick)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Maverick)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Maverick)	Medium	Fix Released
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Maverick)	Medium	Invalid
917801	CVE-2010-4648	linux (Ubuntu Lucid)	Medium	Fix Released
917801	CVE-2010-4648	linux-ec2 (Ubuntu Lucid)	Medium	Fix Released
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Lucid)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Lucid)	Medium	Fix Released
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Lucid)	Medium	Won't Fix
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Lucid)	Medium	Fix Released
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Lucid)	Medium	Invalid
917801	CVE-2010-4648	linux (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-ec2 (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Lucid)	Medium	Won't Fix
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Maverick)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Precise)	Medium	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu)	Medium	Fix Released
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Hardy)	Medium	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Lucid)	Medium	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Maverick)	Undecided	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Natty)	Medium	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Oneiric)	Medium	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Precise)	Medium	Fix Released
917801	CVE-2010-4648	linux (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-armadaxp (Ubuntu Quantal)	Medium	Fix Released
917801	CVE-2010-4648	linux-ec2 (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-fsl-imx51 (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-maverick (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-natty (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-lts-backport-oneiric (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-mvl-dove (Ubuntu Quantal)	Medium	Invalid
917801	CVE-2010-4648	linux-ti-omap4 (Ubuntu Quantal)	Medium	Invalid

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2010-4648

Related bugs and status

Related bugs

References