|
|
|
Demonstration of the Evolving Bluetooth Threat |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : Recently the issue of Bluetooth security raised its head once again. For such a young protocol, Bluetooth has had one rough ride. This time, however, it was for two very separate reasons. The first was a protocol fuzzer an automated test harness for the L2CAP protocol that was released by Pierre Betouin 1 I later helped out with the project adding certain functionality . The author of the tool used this to discover multiple unauthenticated denial of service conditions in common top-tier cellular handsets. It has always amused me that we have to classify remote device crashes as denial of service only, as we simply don t have the visibility into a lot of these proprietary devices in order to gain a full understanding as to the degree of exploitability. The second reason was the OSX.Inqtana.A worm 2 3 . What I found interesting about this was that it was the first worm to my knowledge that actually exploited a Bluetooth vulnerability to aid in its propagation. Previously, we had only seen worms utilize Bluetooth as a mechanism by which to spread. However, those typically still involved user interaction to allow to do so. In this instance, the worm actually exploited a vulnerability detailed by Kevin Finisterre in order to gain a foothold on the vulnerable Mac OSX host. On the subject of Bluetooth vulnerability exploitation, at EUSecWest there was an excellent demo by Tim Hurman during his ARMed Combat presentation. He exploits a buffer overflow vulnerability 4 in the WidComm Bluetooth stack on a Microsoft Windows Mobile 2003 SE device in order to execute arbitrary code. I believe this is going to be where a rash of new vulnerabilities will emerge in the future. As desktops become harder to exploit due to improved network and host security and increasing number of mobile wireless devices centered on Symbian, Windows Mobile, and Linux is going to create an ever more tantalizing target for malicious software authors and attackers alike. References 1 http securitech.homeunix.org blue 2 http securityresponse.symantec.com avcenter venc data osx.inqtana.a.html 3 http www.symantec.com outbreak macoutbreak.html 4 http www.pentest.co.uk documents ptl-2004-03.html
Les mots clés de la revue de presse pour cet article : bluetooth
Les videos sur SecuObs pour les mots clés : demonstration bluetooth
Les mots clés pour les articles publiés sur SecuObs : bluetooth
Les éléments de la revue Twitter pour les mots clé : bluetooth
Les derniers articles du site "Symantec Connect Security Response Billets" :
- What you need to know about election apps and your personal data
- Microsoft Patch Tuesday April 2016
- New Adobe Flash Player exploit used by Magnitude and Nuclear exploit kits
- Latest Intelligence for March 2016
- New Flash zero-day exploited by attackers in the wild
- Samsam may signal a new trend of targeted ransomware
- Four tax scams to watch out for this tax season
- Most prevalent Android ransomware in the West arrives in Japan
- Taiwan targeted with new cyberespionage back door Trojan
- Seven Iranians charged in relation to cyberattacks against US
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.190.17.190 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.190.17.190 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, attaque, outil, microsoft, réseau, audit, metasploit, vulnérabilité, système, virus, internet, usbsploit, données, source, linux, protocol, présentation, scanne, réseaux, scanner, bluetooth, conférence, reverse, shell, meterpreter, vista, rootkit, détection, mobile, security, malicieux, engineering, téléphone, paquet, trames, https, noyau, utilisant, intel, wishmaster, google, sysun, libre |
| Mini-Tagwall de l'annuaire video : | | | | curit, security, biomet, metasploit, biometric, cking, password, windows, botnet, defcon, tutorial, crypt, xploit, exploit, lockpicking, linux, attack, wireshark, vmware, rootkit, conference, network, shmoocon, backtrack, virus, conficker, elcom, etter, elcomsoft, server, meterpreter, openvpn, ettercap, openbs, iphone, shell, openbsd, iptables, securitytube, deepsec, source, office, systm, openssh, radio |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
