Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Security flaw in wireless client used in some Pocket PC devices identified
Posted on 17-Jan-2005 08:22 | Filed under: News



Security firm Airscanner has discovered a flaw in the way the Windows Mobile Odyssey client manages the WEP key information. The wireless driver included with the Dell X50 Pocket PC stores WEP keys as plaintext in the registry. The keys
KEY4=6677889900, KEY3=1122334455, KEY2=eeffddeeff, KEY1=aabbccddee are stored in the registry as

[HKEY_LOCAL_MACHINE\Comm\TIACXWLN1\Parms]
"HTCWEPDefaultKey4"=hex:01,00,00,00,66,77,88,99,00,8c,f6,36,1d,af,90,17,5b,00,f6,36,1d,af,00,00,00
"HTCWEPDefaultKey3"=hex:01,00,00,00,11,22,33,44,55,8c,f6,36,1d,af,90,17,5b,00,f6,36,1d,af,00,00,00
"HTCWEPDefaultKey2"=hex:01,00,00,00,ee,ff,dd,ee,ff,8c,f6,36,1d,af,90,17,5b,00,f6,36,1d,af,00,00,00
"HTCWEPDefaultKey1"=hex:01,00,00,00,aa,bb,cc,dd,ee,8c,f6,36,1d,af,90,17,5b,00,f6,36,1d,af,00,00,00

Airscanner says this could be a problem if the handheld is lost or borrowed. Since this information is stored as plaintext, anyone could read it and gain access to the WEP protected network registered with this device. This has not yet been tested with other devices that use the Odyssey client.

Originally the problem was thought to be within the Odyssey client used on these Pocket PC, but Funk Software, developers of the Odyssey client commented: "Odyssey encrypts all sensitive information that it stores in the registry. The example registry settings are not even from the area of the registry that Odyssey uses.

It is possible that the WEP keys you cite were stored by the NIC driver. An old practice, apparently not yet abandoned, is for NIC drivers to save the last configured WEP keys, so that they can be re-instantiated on reboot. Thus, when Odyssey sets the operational WEP keys for the adapter, the NIC driver might be storing them in its own area of the registry."



More information: http://www.airscanner.com...



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Trending now »

Hot discussions in our forums right now:

2019 Novel Coronavirus Covid-19 Discussion
Created by Batman, last reply by Batman on 10-Jul-2020 12:47 (11883 replies)
Pages... 791 792 793


Tiwai Point is Closing
Created by tdgeek, last reply by tdgeek on 10-Jul-2020 11:47 (89 replies)
Pages... 4 5 6


Wellingtonians - where do you find your strong umbrellas?
Created by hio77, last reply by neb on 9-Jul-2020 18:10 (34 replies)
Pages... 2 3


Apple and Samsung not including chargers in the box
Created by mrgsm021, last reply by CrashAndBurn on 10-Jul-2020 11:59 (15 replies)

Chorus commissions new core routers
Created by freitasm, last reply by BMarquis on 9-Jul-2020 14:45 (28 replies)
Pages... 2


Broadband and speed?
Created by lalalalaman, last reply by nztim on 6-Jul-2020 18:17 (13 replies)

Advice, please - how to get audio to a TV via DisplayPort?
Created by jonathan18, last reply by jonathan18 on 9-Jul-2020 15:01 (12 replies)

Microsoft and invalid GST Invoices
Created by 48clyde, last reply by fearandloathing on 7-Jul-2020 16:35 (12 replies)