Re: Handspring Visor D.O.S

From: arkat_private
Date: Thu Jan 10 2002 - 15:58:06 PST

  • Next message: Mandrake Linux Security Team: "MDKSA-2001:095-1 - glibc update"

    No surprise. Nokia 9110 crashes too (000000/00/230040105044201/0).
    
    I am pretty sure there are numerous remotely exploitable security problems,
    not only tcp/ip but sms also.
    
    YOU (Roger H. Goun) WROTE:
    >  
    >  On Thu, 2002-01-10 at 09:31, Jason Lutz wrote:
    >  > Problem:
    >  > 
    >  >     The handspring Visor seems to have problems dealing with an nmap scan:
    >  > 
    >  > Exploit:
    >  > 
    >  >    bash-2.04# nmap ip address of visor | This causes a Fatal Exception on
    >  > the palm device.
    >  
    >  Confirmed. It's the TCP connect() scan type that knocks it over. It
    >  seems to survive SYN, FIN, and UDP scans.
    >  
    >  -- Roger
    >  
    
    
    -- 
                                         _     _  _  _  _      _  _
     {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
     (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
     [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!
    



    This archive was generated by hypermail 2b30 : Thu Jan 10 2002 - 15:51:21 PST