Wireless Vulnerabilities & Exploits
Wireless Vulnerabilities & Exploits
WVE ID: WVE-2005-0008
Type: Vulnerability
Status: Candidate
Classification:
Other
Design Flaw
Description:
The SSID used to identify an 802.11 network can be trivially faked by an attacker. Since the SSID is displayed to the user by most 802.11 clients and used to choose which network to connect to, a spoofed SSID can be used to trick a client into connecting to the wrong AP.
Discussion:
If a client can be tricked into connecting to a malicious AP then it may become vulnerable in a number of ways: (a) it may accept an unencrypted connection, (b) the malicious AP might be used as part of a man-in-the-middle attack, (c) the user might be tricked by phishing attacks behind the AP (e.g. a fake hotspot signup page).
Credits
References
WVE:
WVE-2005-0019
Released: 2005-10-18
Submitter
Chris
Waters
(cwaters@networkchemistry.com)
: Network Chemistry
Submitted: Tue Oct 18 11:42:22 -0700 2005
Candidate Date: Mon Oct 24 09:59:27 -0700 2005
