- Apple patching critical SMS vulnerability in iPhone OS SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique

Apple patching critical SMS vulnerability in iPhone OS

Les derniers commentaires publiés sur SecuObs (1-5):

- ESRT @ChrisJohnRiley @carnal0wnage - Exploiting hard filtered SQL Injections - Malicious Code Evolution from IE Zero-Day Exploit Code - Google Releases Skipfish Application Security Scanner - ESRT @securityninja - Burp Suite Tutorial - Repeater and Comparer Tool - ESRT @dinodaizovi - New metasploit blog post - analyzes the first public Perm Les derniers commentaires publiés sur SecuObs (6-25) Tous les commentaires publiés sur SecuObs avant les 5 derniers

Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

S'abonner au fil RSS global de la revue de presse

Apple patching critical SMS vulnerability in iPhone OS

Par Ars Technica Security
Le [2009-07-03] à 20:13:31

Présentation : companion photo for Apple patching critical SMS vulnerability in iPhone OS Security researcher Charlie Miller has revealed that Apple is working on a patch for a security flaw he identified in the iPhone's SMS implementation. The flaw can actually lead to arbitrary code execution, as he explained to Ars last month. Miller hasn't yet detailed the flaw, citing an agreement with Apple, though he and partner Vincenzo Iozzo plan to detail their discovery later this month at the Black Hat Security Conference in Las Vegas. During a presentation at the SyScan security conference in Singapore, Miller explained that a vulnerability in the iPhone's handling of SMS messages makes it possible to send code instead of strictly text. Despite SMS's 140 byte size limitation, the iPhone can reassemble larger messages that are broken up to fit the limitation, which allows larger programs to be sent. The iPhone can be instructed to execute SMS data as code instead of text, and when it executes the code it does so with root privileges and without any interaction from the user. Click here to read the rest of this article [] [] []

Les mots clés de la revue de presse pour cet article : apple critical vulnerability iphone
Les videos sur SecuObs pour les mots clés : apple vulnerability iphone
Les éléments de la revue Twitter pour les mots clé : apple critical vulnerability iphone

Lire l'article complet sur le site d'origine

S'abonner au fil RSS Secuobs pour le site "Ars Technica Security"
Voir tous les articles du site "Ars Technica Security"

Les derniers articles du site "Ars Technica Security" :

- Microsoft Patch Tuesday for July 2009: six bulletins
- Microsoft warns of Video ActiveX flaw; Vista unaffected
- UK ISP drops Phorm behavioral ad techfor now
- Apple patching critical SMS vulnerability in iPhone OS
- Report: botnets sent over 80% of all June spam
- Internet scareware scammers settle with FTC for $100,000
- English Microsoft Security Essentials beta filled in 24 hours
- China not backing off despite filter code post on Wikileaks
- Microsoft Security Essentials beta available
- iPhone OS 3.0 patches 46 known security vulnerabilities
- Smart grids drag utilities into the swamp of online privacy
- New SMB flaw can crash Windows 7 and Server 2008 R2 remotely
- A single smartphone can DoS federal wiretaps
- Truly malicious iPhone malware now out in the wild
- Researchers' well-aimed stone takes down Goliath botnet
- Bot herders turn to the cloud for command-and-control
- Pirates get a taste of Microsoft COFEE
- iPhone worm attacks jailbroken iPhones with default password
- Data breach notifications one step closer to law... again
- HTTPS, SSL attack vector discovered fix is on the way

Voir tous les articles du site "Ars Technica Security"

S'abonner au fil RSS global de la revue de presse

Menu > Articles de la revue de presse : - l'ensemble [tous | francophone] - par mots clé [tous] - par site [tous] - le tagwall [voir] - Top bi-hebdo de la revue de presse [Voir]

Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail

Les derniers commentaires publiés sur SecuObs (6-25):

- ESRT @iagox86 @hdmoore - Using Metasploit to Locate and Exploit the Energizer - ESRT @innismir - New Weblog Post -- Finding Malware on your network via cache - Sniffing with Wireshark as a Non-Root User - Focus on MacNikto v1.1.1 - New Google Chrome v4.1.249.1036 released, fixes multiple security vulnerabili - ESRT @opexxx @synopsi - Remote stack overflows - ESRT @postmodern_mod3 @tmm1 - memprof now displays stack frames and threads - ESRT @_MDL_ @gollmann - Locking botnet agents to specific victim systems in o - CsFire 0.4.1 autonomously protects against dangerous or malicious cross-domai - Seccubus v1.4.1 - Nessus 4.2 compatibility release - ESRT @JGamblin @threatpost - Hackers say they will definitely break into an A - ESRT @hdmoore @iagox86 - Weaponizing dnscat - first version of dnscat shellco - iWep PRO 1.1.3 Released - FireCAT v1.6.2 updated with Framework Detector - ESRT @opexxx - FireCAT v1.6.2 updated with BackendInfo - sipwitch 0.7.4 - Oracle XDB FTP service UNLOCK buffer overflow exploit that spawns a reverse s - XSSploit XSS scanner multiplatfom v0.5 available - Network forensics in IRB xtractr Ruby gem - GreenPois0n Possible Jailbreak Software for iPad OS 32 Les cinq derniers commentaires publiés sur SecuObs Tous les commentaires publiés sur SecuObs avant les 25 derniers

SecuToolBox :

Bluetooth Stack Smasher v0.6 / Bluetooth Stack Smasher v0.8 / Slides Bluetooth Eurosec 2006 / Exposé vidéo Windows Shellcode - Kostya Kortchinsky / Exposé audio Reverse Engineering - Nicolas Brulez / Exposé vidéo Securitech - Pierre Betouin / WEP aircrack + Ubiquiti (MadWifi) 300 mW + Yagi / Secure WIFI WPA + EAP-TLS + Freeradius / Audit Windows / Captive Password Windows / USBDumper / USBDumper 2 / Hacking Hardware / WishMaster backdoor / DNS Auditing Tool / Ettercap SSL MITM / Exploit vulnérabilités Windows / Memory Dumper Kernel Hardening / Reverse Engineering / Scapy / SecUbuLIVE CD / Metasploit / eEye Blink Sec Center / eEye Retina Scanner + d'outils / + de tutoriels

Mini-Tagwall des articles publiés sur SecuObs :

sécurité, exploit, windows, microsoft, réseau, attaque, outil, vulnérabilité, audit, système, virus, internet, données, présentation, metasploit, linux, bluetooth, protocol, vista, scanner, réseaux, shell, engineering, rootkit, paquet, conférence, trames, wishmaster, téléphone, source, sysun, noyau, mobile, https, mémoire, rapport, botnet, téléphones, libre, reverse, navigateur, patch, snort, scapy, intel + de mots clés avec l'annuaire des articles publiés sur SecuObs

Archives Failles Secunia :

- SA38989 Fedora update for tar - SA38988 Fedora update for cpio - SA38921 SUSE update for OpenOffice_org - SA38971 Multi Auktions Komplett System id_auk SQL Injection Vulnerability - SA38945 Ubuntu update for audiofile + d'archives failles avec Secunia et SecuMail

Archives Mailing Full Disclosure :

- Full-disclosure Claude Mercier/CLSC-CHSLD BVLV/Reg03/SSSS est absent(e). - Re: Full-disclosure Fingerprinting Paper with Laser - Full-disclosure Vulnerability Httpdx v1.5.3b - Full-disclosure CA20100318-01: Security Notice for CA ARCserve Backup - Re: Full-disclosure Fingerprinting Paper with Laser + d'archives Full Disclosure avec SecuMail

Archives Mailing Bugtraq :

- announcing skipfish, an automated web app security scanner - Vulnerability Httpdx v1.5.3b - IBM Lotus 6.x HTTP Response Splitting Vulnerability - There are lost of xss vul in PHPWind v6.0 ! - CA20100318-01: Security Notice for CA ARCserve Backup - SECURITY DSA-2018-1 New php5 packages fix null pointer dereference + d'archives Bugtraq avec SecuMail

Mini-Tagwall de l'annuaire video :

vmware, security, virus, biometric, windows, lockpicking, password, botnet, metasploit, tutorial, attack, crypt, linux, network, iphone, server, exploit, wimax, conficker, virtu, virtual, engineering, cisco, reverse, shmoocon, wireshark, ettercap, hacker, firewall, internet, knoppix, rootkit, arduino, wireless, source, conference, backtrack, openbsd, brucon, systm, overflow, openssh, access, buffer, remote + de mots clés avec l'annuaire des videos

Mini-Tagwall des articles de la revue de presse :

security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité + de mots clés avec l'annuaire de la revue de presse

Mini-Tagwall des Tweets de la revue Twitter :

security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack + de mots clés avec l'annuaire de la revue Twitter