CVE-2006-0376

An attacker sets up a wireless station in ad hoc mode and either establishes an association with a target client or responds to the client's probe requests so that the client associates with the attacker's station. Because the operating system does not alert the user that the connection is ad hoc rather than infrastructure mode, the user may unknowingly communicate over an unexpected peer-to-peer link [ref_id=1]. This allows the attacker to position themselves on the same logical network segment and subsequently launch further attacks such as credential capture or client-side exploitation [ref_id=1].

The advisory does not specify particular functions or files. The vulnerability is in the 802.11 wireless client implementation of Windows 2000, Windows XP, and Windows Server 2003, which fails to warn users when associating with an ad hoc (peer-to-peer) station or when an ad hoc station associates with it [ref_id=1].

No patch is included in the bundle. Microsoft Security Advisory 917021 (referenced on the KARMA page) addresses this issue, but the bundle does not contain the advisory text or a diff [ref_id=1]. The remediation guidance implied by the advisory is that the operating system should warn the user before establishing or accepting an ad hoc association, so that the user can make an informed decision about whether to proceed.