AirTight Security Researcher Uncovers Wi-Fi Vulnerability in WPA2

win32sux · 07-25-2010, 08:12 AM

Quote:

AirTight Networks, the leading provider of wireless intrusion prevention systems and services (WIPS) announced today that senior wireless security researcher, Md Sohail Ahmad has uncovered just how easy it is to hack into an encrypted wireless network without breaking the encryption key. A documented, yet little known, vulnerability of the Wi-Fi WPA2 security protocol, which AirTight has named 'Hole 196,' exposes secured wireless networks to a key "loophole" that allows authorized users to bypass private key encryption and authentication. AirTight researcher, Md. Sohail Ahmad, will be demonstrating this vulnerability at the Black Hat Arsenal and at DEFCON18 in a presentation entitled "WPA Too?!" in Las Vegas on July 29th and July 31st respectively.

Complete Article

Thanks to Slashdot for covering this.

Hangdog42 · 07-25-2010, 11:40 AM

I'm a bit confused by this since they never really define "authorized user". It seems to me that you have to be connected to the network before you can use the exploit, in which case it seems the exploit is pretty useless since you're already connected to the network.

Am I missing something?

PTrenholme · 07-25-2010, 01:00 PM

Quote:

Originally Posted by Hangdog42

I'm a bit confused by this since they never really define "authorized user". It seems to me that you have to be connected to the network before you can use the exploit, in which case it seems the exploit is pretty useless since you're already connected to the network.

Am I missing something?

Perhaps. What the article suggests is that someone already connected to the network could easily decode packets encrypted for use by other users of that network. The article also asserts that interception by network uses of traffic not intended for their use is a major security problem.

Noway2 · 07-26-2010, 05:20 AM

I agree with ptrenholme and interpret the article the same way. It keeps referencing 'insider' exploits and says that this hole is different than an external access exploit. Take this line from the article: "AirTight felt it was important to raise awareness around it ... as any security best practice you need a layered approach because one size does not fit all."

Sounds like a marketing ploy based on FUD (Fear Uncertainty and Doubt) to sell their services.

Hangdog42 · 07-26-2010, 07:06 AM

Thanks, that explanation sounds reasonable. So essentially this exploit puts WPA2 encrypted traffic on the same level as wired traffic in that any packet could be examined by someone other than the intended recipient.

kiranGosavi · 08-03-2010, 01:52 AM

You can get your queries solved by attending the webinar AirTight is hosting. This webinar is completely based on this vulnerability.