Critical security vulnerability in the 802.11 wireless protocol
May 14, 2004
A vulnerability in the most common wireless networking protocol, the 802.11 standard established by the Institute of Electrical and Electronic Engineers (IEEE), allows a device to essentially jam other devices on a network using a low-power signal. The Australian Computer Emergency Response Team issued an advisory warning companies that their wireless networks could be attacked by a hacker.
"Previously, attacks against the availability of IEEE 802.11 networks have required specialized hardware and relied on the ability to saturate the wireless frequency with high-power radiation, an avenue not open to discreet attack," AusCERT said in its advisory. "This vulnerability makes a successful, low-cost attack against a wireless network feasible for a semiskilled attacker."
The flaw affects the clear channel assessment (CCA) procedure, which attempts to minimize the probability that two devices will broadcast on the same frequency. The attack can cause all devices in range to wait to transmit until the attack has halted.
The attack is considered a denial-of-service tactic and, as such, is not rated a critical problem. However, AusCERT warns that emergency response networks should move to wireless technologies that are not vulnerable to jamming.
Vulnerable devices include any that support the 802.11, 802.11b and low-speed 802.11g wireless standards. Devices that use 802.11a or high-speed 802.11g, above 20mbps, are not vulnerable, the organization said.
Source: C-Net News
Become an authorized reseller of Proxy Sentinel™ and Firewall Sentinel™. Do like the rest of our authorized resellers and have your clients benefit the important security features of our products and solutions, while increasing your sales at the same time. Click here for all the details.
You can link to the
Internet Security web site as
much as you like. Read our section on how your company can participate in our
reciprocal link exchange program
and increase your rankings
in the major search engines such as
Site optimized by Pagina+™
Powered by Sun Hosting
Search engine keywords by Rank for Sales
Development platform by My Web Services
Internet Security.ca is listed in
Global Business Listing