NVD

Id
5014  
Name
CVE-2008-5230  
Description
The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors" products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packets from an access point (AP) to a client and spoof packets from an AP to a client, and conduct ARP poisoning attacks or other attacks, as demonstrated by tkiptun-ng.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-11-25  
Modified Date
2008-12-03  
Seq
2008-5230  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31337 5014 CVE-2008-5230 http://arstechnica.com/articles/paedia/wpa-cracked.ars  View
31338 5014 CVE-2008-5230 http://dl.aircrack-ng.org/breakingwepandwpa.pdf  View
31339 5014 CVE-2008-5230 [dailydave] 20081107 All Ur WiFi(WPA) R Belong 2 PacSec  View
31340 5014 CVE-2008-5230 http://radajo.blogspot.com/2008/11/wpatkip-chopchop-attack.html  View
31341 5014 CVE-2008-5230 http://trac.aircrack-ng.org/svn/trunk/src/tkiptun-ng.c  View
31342 5014 CVE-2008-5230 http://www.aircrack-ng.org/doku.php?id=tkiptun-ng  View
31343 5014 CVE-2008-5230 20081121 Cisco Response to TKIP Encryption Weakness  View
31344 5014 CVE-2008-5230 32164  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47076 JVNDB-2008-002386 不特定のシスコ製品および他のベンダ製品の TKIP におけるパケットの解読/偽装およびARP ポイズニングの実行等の脆弱性 Wi-Fi ネットワーク上で、WPA および WPA2 を使用する不特定のシスコ製品および他のベンダ製品における Temporal Key Integrity Protocol (TKIP) の実装には、特定の不正なリプレイパケットに対しての対策が不十分なため、パケットの解読、偽装および ARP ポイズニングの実行等が行われてしまう脆弱性が存在します。 CVE-2008-5230 35343 CVE-2008-5230 5014 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002386.html 2008-11-25 2009-07-08 View