It occurred to me that iMil wrote in gmane.os.netbsd.devel.network:
>
>
>> Note this don't fix the scan mode problem i mentionned in this list a week
>> ago.
>
> add-on, it seems to work when setting interface up, i.e. ifconfig ural0 
> up, then wiconfig ural0 -D will output correct results. It didn't on 
> NetBSD-current (3.99.7).

It seems to work under cardbus too - there's one oddity though: It lists
my accesspoint as having a datarate of 11 Mbps. But it's a 11g access
point, and it will associate at 54 Mbps.