179 matches found
T-Mobile Wi-Fi Calling App vulnerable to Man-in-the-Middle attack
T-Mobile devices having a default Wi-Fi Calling feature that keeps you connected in areas with little or no coverage using Wi-Fi connection. But according to new finding by students Jethro Beekman and Christopher Thompson from University of California Berkeley, that this feature lets millions of...
T-Mobile Fixes Man-in-the-Middle Vulnerability in Wi-Fi Calling App
UPDATE: The default “Wi-Fi Calling” feature on T-Mobile devices that lets milllions of Android users make phone calls over a wireless Internet connection contained a vulnerability that could have been exploited to perform man-in-the-middle MiTM attacks. Graduate students Jethro Beekman and...
Phony T-Mobile, Vodaphone Notifications Duping U.K. Users
Cybercriminals in the United Kingdom this week have launched two separate but similar scams intent on gaining access to users’ computers. Both scams impersonate e-mail notifications from popular British cell phone companies and both ultimately open a backdoor on the targeted computers. E-mail...
Design/Logic Flaw
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remot...
Alleged TeamPoison Member Sentenced to Six Months in Jail
A British teenager has been sentenced to six months in jail after pleading guilty to illegally accessing the Gmail account of a former top aide to former Prime Minister Tony Blair. Junaid Hussain was allegedly a member of the TeamPoison hacking crew and had posted some of Blair’s personal...
Researchers Reveal How Attackers Can Track Cell Phone Locations
New research has found information leaked by cell towers can be used to determine your cell phone’s general location. The situation was detailed by researchers from the University of Minnesota, who discovered that there is enough information leaked from the lower layers of the GSM Global System f...
Update: Hacking Group TeaMp0isoN Claims Breach of T-Mobile
The hacking group TeaMp0isoN claims to have compromised Web servers used by T-Mobile, and absconded with account information for company employees, including members of T-Mobile’s media team. The group used a post on its official Twitter account taking responsibility for the attack, which targete...
Android G2 Phone Can Roll Back Jailbreaks
Since at least the time of the release of the first generation Apple iPhone, sophisticated smartphone users have been working diligently to jailbreak their devices in order to load their own software, install third-party applications and make other modifications. Now, one Android device, the G2...
[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....
One bug to rule them all IE5,IE6,IE7,IE8,Netscape,Firefox,Safari,Opera,Konqueror, Seamonkey,Wii,PS3,iPhone,iPod,Nokia,Siemens.... and more. Don't wet your pants - it's DoS only Release mode: Tried hard to coordinate - gave up Reference : GSEC-TZO-26-2009 - One bug to rule them all WWW :...
T-Mobile data on Full Disclosure is real
T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...
CVE-2009-0606
The linkimage function in linker/linker.c in the dynamic linker in Bionic in Open Handset Alliance Android 1.0 on the T-Mobile G1 phone does not properly handle file descriptors 0, 1, and 2 for a setgid program, which allows local users to create arbitrary files owned by certain groups, possibly ...
CVE-2009-0606
The CVE-2009-0606 entry concerns Android 1.0 (Open Handset Alliance) on the T-Mobile G1, where the link_image function in linker/linker.c of Bionic’s dynamic linker mishandles file descriptors 0, 1, and 2 for a setgid program. This behavior could allow local users to create arbitrary files owned ...
Applications can open up remote root access on G1 Phone
Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...
T-Mobile G1 phone Google Android protection bypass
Pplication can run telnetd with root privileges...
Android WEB浏览器未明远程代码执行漏洞
BUGTRAQ ID: 31946 CNCAN ID：CNCAN-2008102901 Android是一款Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android Web浏览器存在一个未明安全问题，远程攻击者可以利用漏洞以浏览器内容上下文执行任意代码。 攻击者必须构建恶意链接，诱使用户访问来触发。 HTC T-Mobile G1 Google Android 目前没有解决方案提供： http://code.google.com/android/...
CVE-2007-1823
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
Design/Logic Flaw
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
CVE-2007-1823
CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...
