|
Vulnerability Development
mailing list archives
Palm Bean Lock feature
From: Christian <christian () dijkstra murdoch edu au>
Date: Sun, 17 Dec 2000 11:59:46 +0800
Hi,
Recently on BUGTRAQ, when discussing a vulnerability with a certain
piece of Palm software, it was mentioned that:
* If an attacker obtains access to the user's Palm device he can copy
via IrDA (infrared), or "beam", the "sceiddb.pdb" file. By default
this file does not have the "Beam Lock" protection bit set. This
bit tells the PalmOS not to allow the beaming of the file. But the
"Beam Lock" protection can be easily disabled.
Does anyone know how this "beam lock" protection is enabled/disabled? I
can't find any way of doing it via the ordinary interface so I assume
it's a little more sophisticated than this.
Regards,
Christian.
By Date
By Thread
Current thread:
- Palm Bean Lock feature Christian (Dec 17)
|