hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials.

Multiple vulnerabilities has been discovered and corrected in hostapd :

hostapd 0.7.3, and possibly other versions before 1.0, uses 0644 permissions for /etc/hostapd/hostapd.conf, which might allow local users to obtain sensitive information such as credentials (CVE-2012-2389).

Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service (crash or abort) via a small TLS Message Length value in an EAP-TLS message with the More Fragments flag set (CVE-2012-4445).

The updated packages have been patched to correct these issues.

Remove hostapd-specific runtime state directory Fixup typo in pid file path in hostapd.service Fixup typo in configuration file path in hostapd.service Tighten-up default permissions for hostapd.conf (CVE-2012-2389) Add BuildRequires for systemd-units Fixup typo in configuration file path in hostapd.service Tighten-up default permissions for hostapd.conf (CVE-2012-2389)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Remove hostapd-specific runtime state directory Fixup typo in pid file path in hostapd.service Add BuildRequires for systemd-units Fixup typo in configuration file path in hostapd.service

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Tighten-up default permissions for hostapd.conf (CVE-2012-2389)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
62659	Mandriva Linux Security Advisory : hostapd (MDVSA-2012:168)	Nessus	Mandriva Local Security Checks	medium
59582	Fedora 16 : hostapd-0.7.3-9.fc16 (2012-9206)	Nessus	Fedora Local Security Checks	low
59581	Fedora 17 : hostapd-0.7.3-9.fc17 (2012-9137)	Nessus	Fedora Local Security Checks	low
59421	Fedora 15 : hostapd-0.7.3-2.1.fc15 (2012-8611)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2012-2389

high

Tenable Plugins

medium

low

low

low