The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Intel ProWireless Security vulnerability

    Discussion in 'Networking and Wireless' started by jujube, Aug 2, 2006.

  1. jujube

    jujube Notebook Deity

    Reputations:
    181
    Messages:
    1,072
    Likes Received:
    0
    Trophy Points:
    55
    I didn't see this get posted here yet - if it was, MOD, please close and delete

    http://news.com.com/Intel+sends+out+Centrino+patches/2100-1002_3-6101488.html?tag=nefd.top

    Intel has issued patches for flaws in its Centrino device drivers and ProSet management software that affect the security of the wireless products.

    Three flaws are addressed with the updates. One could allow an attacker to break into a PC via Wi-Fi or even create a worm that jumps from one wireless-enabled laptop to another, provided the computers are within each other's range. Another security hole makes the system vulnerable to attacks that let a malicious user gain additional privileges, according to security experts at Sans Internet Storm Center and F-Secure.
    In other news:

    * AOL: Come to us for the freebies
    * A fork in the road for GPL revisions
    * Siggraph: Microsoft goes 3D
    * News.com Extra: An early look at Freespire
    * Video: Yahoo Messenger with Voice 8

    Intel's patches address vulnerabilities in its Intel PRO/Wireless 2200BG, 2915ABG, 2100 and 3945ABG Network Connection products, according to a security advisory from the chipmaker.

    The vulnerability involving the Intel Centrino wireless driver could allow attackers within range of a Wi-Fi station to access a vulnerable laptop and execute arbitrary code on the target system, according to the Intel advisory.

    F-Secure notes that the vulnerabilities involving the drivers are "pretty awful" and that the patch can be troublesome to download and install because of its size, 129MB.

    "You have to manually install this patch, and it is unusually large," said Mikko Hypponen, chief research officer at security company F-Secure. "Most people, especially home users, may not know how to do it, since it is not that straightforward."

    Intel offers a complete version of the software for the driver system, which means the download is relatively large, a representative for the chipmaker said.

    Security experts note there are no known exploits publicly circulating that have been crafted to take advantage of these flaws.

    Intel, meanwhile, provides a a link to help users identify vulnerable systems and advises them to install the patches.

    Link to http://support.intel.com/support/wireless/wlan/sb/cs-005905.htm

    The file size is quite large about 129mb
     
  2. Amber

    Amber Notebook Prophet NBR Reviewer

    Reputations:
    1,659
    Messages:
    5,066
    Likes Received:
    0
    Trophy Points:
    205
    Thanks for the info...

    Might as well update my driver since I've been meaning to do that .
     
  3. M1CH43L

    M1CH43L Notebook Geek

    Reputations:
    0
    Messages:
    98
    Likes Received:
    0
    Trophy Points:
    15
    I have that card, haha, and man does it have fast transfer rates! Now I need to patch, hope this download doesn't create a hole in the security. I'll have to check this out.

    {EDIT} I contacted dell, and they said they do support the patch for the 3945ABG, and that the driver will be on the dell.com website, but it may take a while since the system has to restart.
     
  4. titaniummd

    titaniummd Notebook Deity

    Reputations:
    70
    Messages:
    1,746
    Likes Received:
    0
    Trophy Points:
    55
    I checked the website and the version of my driver is not one of the listed ones requiring an update.

    Intel Pro wireless 3965 ABG 10.1.1.164 (my version)

    Version recommended for upgrade was 10.5.1.57 and 10.5.0.0 which may be a different OEM.

    I did however, update my Intel Proset Wireless driver.
     
  5. Outrigger

    Outrigger SupaStar Reviewer NBR Reviewer

    Reputations:
    167
    Messages:
    1,067
    Likes Received:
    0
    Trophy Points:
    55
    I don't get it, I downloaded and installed the detection tool to determine what I have and what to download, but a message saying no wireless lan not detected, how can that be?
     
  6. autophobic

    autophobic Notebook Geek

    Reputations:
    0
    Messages:
    85
    Likes Received:
    0
    Trophy Points:
    15
    I had already downloaded this driver, so I don't know if I see anything new. So now I have the 10.5.1.57 driver from that massive package that I downloaded about a week and a half ago, does that mean I'm good to go or should I re-download the package?