backtop


Print 7 comment(s) - last by tcsenter.. on Aug 5 at 5:21 PM

Drivers the root cause

Intel this week issued a vulnerability notice affecting all Centrino laptops. The vulnerability notice comes just right behind a report that a team of security researchers at Black Hat revealed a method to circumvent the security of Apple's MacBook laptops by penetrating the system wirelessly at the driver level. Black Hat says the attack is based on the fact that Wi-Fi drivers are poorly tested and designed.

Intel is warning that drivers used with its Centrino platform pose a security threat, and that customers using Centrino based laptops either contact their respective manufacturers for an updated driver, or download one directly from Intel's website. Intel's website indicated "an attacker could potentially exploit these vulnerabilities which could potentially lead to remote code execution and system control."

The security notice also mentioned that drivers supplied by Microsoft for Centrino notebooks are vulnerable. From the notice:

Security vulnerabilities have been identified in the Microsoft Windows drivers for the IntelĀ® 2200BG and 2915ABG PRO/Wireless Network Connection Hardware (w22n50.sys, w22n51.sys, w29n50.sys, w29n51.sys), which could potentially be exploited by attackers within range of the Wi-Fi station to execute arbitrary code on the target system with kernel-level privileges. These flaws are due to a memory corruption while parsing certain frames.


Comments     Threshold


This article is over a month old, voting and posting comments is disabled

hmm
By Burning Bridges on 8/4/2006 2:03:44 PM , Rating: 2
Also, the centrino platform is fine AIUI, just the drivers are not...

Kinda misleading headline =/

or it could just be me!




RE: hmm
By shadowzz on 8/4/06, Rating: 0
RE: hmm
By Burning Bridges on 8/4/2006 2:26:11 PM , Rating: 2
What I meant was that the hardware isn't flawed, the drivers are =P

Think before you flame ;-)


RE: hmm
By MrDiSante on 8/4/2006 5:02:04 PM , Rating: 2
Explain to me please, how is it any fault of Microsoft's that some idiot who doesn't work for Microsoft wrote a driver with security holes in it. What d'you expect them to do, run run them as limited user accounts? Why don't you think before you type?


RE: hmm
By rrsurfer1 on 8/4/2006 7:06:48 PM , Rating: 2
Well... It's not totally their fault but you have to give them a small share of the blame. WHQL Certification, which these drivers have, requires that Microsoft evaluate the drivers for security and reliability. If they passed this certification then MS is IMHO partially to blame for giving it the O.K.


RE: hmm
By tcsenter on 8/5/2006 5:21:42 PM , Rating: 3
A. Microsoft doesn't evaluate WHQL driver candidates. The vendor tests their own drivers (or contracts a third party) using Microsoft's HCT (Hardware Compatibility Testing) kit and other developer tools. The vendor then submits the test and debug logs, which Microsoft checks [by computer] for testing failures/errors and that the mandatory tests were performed according to the device class.

B. WHQL test requirements do not include any security vetting. WHQL and Windows Logo certification is a baseline compatibility and interoperability testing regime, to ensure that a vendor's hardware/drivers are understandible to Windows, tend not to crash the system, and generally play nice with other devices. That is all.


thanks for two day old news
By R Nilla on 8/4/2006 1:28:12 PM , Rating: 3
posted on anandtech's own forums:
http://forums.anandtech.com/messageview.aspx?catid...

which links to this story from two days ago:
http://www.laptoplogic.com/news/detail.php?id=1214

better late than never I suppose...

- R. Nilla




"If they're going to pirate somebody, we want it to be us rather than somebody else." -- Microsoft Business Group President Jeff Raikes














botimage
Copyright 2012 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki