[general_re]

So in order to exploit this, you must have total control over my network, since you are replacing the existing LDAP server.

No, I just have to find a wireless user and pretend to be an LDAP server...

[SengirV]

No, I just have to find a wireless user and pretend to be an LDAP server...

Now you just have to find a wireless user who is stupid enought to use no authentication to the DHCP(LDAP) server. IF they are doing that, then they are in a world of hurt to begin with.