PT-2009-2916 · Microsoft · Windows Mobile +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile versions 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition Windows Mobile 6 Professional Description: A directory traversal issue in the OBEX FTP Service of the Microsoft Bluetooth stack allows remote authenticated users to...

Microsoft Bluetooth Stack OBEX Directory Traversal

Title: Microsoft Bluetooth Stack OBEX Directory Traversal Author: Alberto Moreno Tablado Vendor: Microsoft Product: Windows Mobile 6 Professional Probably Windows Mobile 5.0 for Pocket PC and Windows Mobile 5.0 for Pocket PC Phone Edition References:...

Microsoft Windows Mobile bluetooth stack directory traversal

OBEX FTP directory traversal...

CVE-2008-4540

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

Design/Logic Flaw

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

CVE-2008-4540

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

CVE-2008-4540

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access...

CVE-2008-4540

This CVE concerns Windows Mobile 6 on the HTC Hermes, where WLAN passwords are exposed to the auto-completion mechanism of the password field. The root cause is that the password input handling allows nearby attackers to retrieve credentials, enabling bypass of WLAN authentication and potential u...

vxFtpSrv 2.0.3 CWD command Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== vxFtpSrv 2.0.3 CWD command Remote Buffer Overflow PoC ===================================================== !/usr/bin/perl vxFtpSrv 2.0.3 CWD command Overflow PoC by Julien Bedard...

vxFtpSrv 2.0.3 - CWD Remote Buffer Overflow (PoC)

vxFtpSrv 2.0.3 - CWD Remote Buffer Overflow PoC !/usr/bin/perl vxFtpSrv 2.0.3 CWD command Overflow PoC by Julien Bedard www.kosseclab.com [email protected] Tested on MS Windows Mobile 6.0 maybe other versions are vulnerable vxftpsrv is the most common ftp server for mobile devices: wm, ppc etc. ...

vxftpsrv-overflow.txt

!/usr/bin/perl vxFtpSrv 2.0.3 CWD command Overflow PoC by Julien Bedard www.kosseclab.com [email protected] Tested on MS Windows Mobile 6.0 maybe other versions are vulnerable vxftpsrv is the most common ftp server for mobile devices: wm, ppc etc. it suffer of an overflow when it recieve too lon...

vxFtpSrv 2.0.3 - 'CWD' Remote Buffer Overflow (PoC)

!/usr/bin/perl vxFtpSrv 2.0.3 CWD command Overflow PoC by Julien Bedard www.kosseclab.com [email protected] Tested on MS Windows Mobile 6.0 maybe other versions are vulnerable vxftpsrv is the most common ftp server for mobile devices: wm, ppc etc. it suffer of an overflow when it recieve too lon...

Code injection

Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service device reboot by configuring a Bluetooth device with a long h...

Windows Mobile 6.0 Device long name Remote Reboot Exploit

No description provided by source. !/usr/bin/perl ----------WM6 remote overflow reboot PoC---------- Simple exploit for remote rebooting a windows mobile device Maybe we can use it for doing command execution, I've not test it since the device is rebooting and do not dump a core for further...

CVE-2008-4295

CVE-2008-4295 affects Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125. The vulnerability arises when handling the first Bluetooth connection attempt to a peer with a long name, enabling a remote attacker to cause a denial of service (device reboot) by configuring a long HCI name and...

CVE-2008-4295

Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service device reboot by configuring a Bluetooth device with a long h...

Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot (Denial of Service)

!/usr/bin/perl ----------WM6 remote overflow reboot PoC---------- Simple exploit for remote rebooting a windows mobile device Maybe we can use it for doing command execution, I've not test it since the device is rebooting and do not dump a core for further analysing. The bug is not realy in the...

Windows Mobile 6.0 Device long name Remote Reboot Exploit

Exploit for hardware platform in category dos / poc ========================================================= Windows Mobile 6.0 Device long name Remote Reboot Exploit ========================================================= !/usr/bin/perl ----------WM6 remote overflow reboot PoC---------- Simpl...

Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot (Denial of Service)

Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot Denial of Service !/usr/bin/perl ----------WM6 remote overflow reboot PoC---------- Simple exploit for remote rebooting a windows mobile device Maybe we can use it for doing command execution, I've not test it since the device is...

wm-reboot.txt

!/usr/bin/perl ----------WM6 remote overflow reboot PoC---------- Simple exploit for remote rebooting a windows mobile device Maybe we can use it for doing command execution, I've not test it since the device is rebooting and do not dump a core for further analysing. The bug is not realy in the...