Stray Thoughts

<< Vulnerability in Pidgin | Oracle Critical Patch Update Advisory - October 2009 >>

Aug272009

Cisco over-the-air-provisioning skyjacking exploit

Published by hirantha at 3:44 PM under Cisco | Security

Cisco issued a security advisory for its 1100 and 1200 Series access lightweight points. The advisory is based on work done by wifi IDS firm AirMagnet. Cisco uses an Over-The-Air-Provisioning (OTAP) protocol that uses multicast data to find a controller. During this initialization phase, a rogue controller could respond and send a bad configuration to the access point, disabling the device.

Cisco provides an advisory here: http://tools.cisco.com/security/center/viewAlert.x?alertId=18919 .

The quick summary: Establish basic configuration options like encryption keys and preferred controller lists before deploying the device.

Tags: cisco, security

E-mail | Permalink | Trackback | Post RSS RSS comment feed 0 Responses

Cisco Releases IOS Bundle of VulnerabilitiesCisco has officially released a "bundle" of vulnerability notices for their IOS software.&...Firefox 3.5 new exploitThe Mozilla security blog confirms an exploit against an unpatched vulnerability Firefox 3.5 exists ...Multiple Vulnerabilities in Cisco Unified MeetingPlacethese patches released today: http://www.cisco.com/en/US/products/products_security_advisory09186a00...