Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Airscanner Reveals Possible Security Vulnerability With Spb Kiosk
Posted on 25-Dec-2005 23:16. | Tags Filed under: News.



Security firm Airscanner has disclosed details of two possible vulnerabilities on Spb Kiosk Engine. The software is used by enterprise clients to lockdown Windows Mobile Pocket PC devices.

The Spb Kiosk Engine allows users to run custom applications in kiosk mode. In this mode, the target applications are the only ones that can be used on a specific Pocket PC device.

In one of the advisories, Airscanner warns users that despite the device lockdown, it is still possible to execute programs via 'features' of the running application (eg. Pocket Word will execute programs via hyperlink). In addition, autorun is still enabled on the devices, which allows anyone with a SD Card or CF card to execute their own code on the device.

Administrators should disable autorun on the device by placing an autorun.exe file in the \windows directory with read-only options.

Another vulnerability is related to how the software stores an administrator's password on the device.

Advisories can be found here and here.




comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

The President Of The USA - Who do you think?
Created by TimA, last reply by Rikkitic on 3-Dec-2016 11:21 (851 replies)
Pages... 55 56 57


'Quality' NZ news on the way?
Created by Rikkitic, last reply by Fred99 on 2-Dec-2016 10:40 (85 replies)
Pages... 4 5 6


NetFlix: Download and go
Created by jamesrt, last reply by PhantomNVD on 1-Dec-2016 22:16 (28 replies)
Pages... 2


Woooaaahh earthquake 2016-11-14
Created by Fred99, last reply by Pumpedd on 1-Dec-2016 11:50 (470 replies)
Pages... 30 31 32


Pike River - Seal or recovery?
Created by gzt, last reply by Dratsab on 2-Dec-2016 19:25 (40 replies)
Pages... 2 3


Christmas. Bah, humbug.
Created by Rikkitic, last reply by Rikkitic on 3-Dec-2016 11:17 (39 replies)
Pages... 2 3


Spark Ultra Fast Fibre MAX performance and discussion (Some might say Gigabit)
Created by Talkiet, last reply by firefuze on 3-Dec-2016 09:19 (52 replies)
Pages... 2 3 4


FS: NES Classic Mini - New and unopened
Created by thewanderingv, last reply by thewanderingv on 2-Dec-2016 22:47 (17 replies)
Pages... 2