CVE-2006-7180

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-30 · updated 2026-06-16

Description

ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information (related to network structure), and possibly cause a denial of service (disrupted authentication) and conduct spoofing attacks.

Affected products

Madwifi: through 0.9.2

References

http://madwifi.org/ticket/967
http://madwifi.org/wiki/Releases/0.9.3
http://secunia.com/advisories/24670
http://secunia.com/advisories/24841
http://secunia.com/advisories/24931
http://secunia.com/advisories/25861
http://secunia.com/advisories/26083
http://security.gentoo.org/glsa/glsa-200704-15.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:082
http://www.novell.com/linux/security/advisories/2007_14_sr.html
http://www.securityfocus.com/archive/1/466689/30/6900/threaded
http://www.securityfocus.com/bid/23434

Get alerted when CVE-2006-7180 or the next vulnerability affects your stack