Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Airscanner Reveals Possible Security Vulnerability With Spb Kiosk
Posted on 25-Dec-2005 23:16 | Tags Filed under: News



Security firm Airscanner has disclosed details of two possible vulnerabilities on Spb Kiosk Engine. The software is used by enterprise clients to lockdown Windows Mobile Pocket PC devices.

The Spb Kiosk Engine allows users to run custom applications in kiosk mode. In this mode, the target applications are the only ones that can be used on a specific Pocket PC device.

In one of the advisories, Airscanner warns users that despite the device lockdown, it is still possible to execute programs via 'features' of the running application (eg. Pocket Word will execute programs via hyperlink). In addition, autorun is still enabled on the devices, which allows anyone with a SD Card or CF card to execute their own code on the device.

Administrators should disable autorun on the device by placing an autorun.exe file in the \windows directory with read-only options.

Another vulnerability is related to how the software stores an administrator's password on the device.

Advisories can be found here and here.







comments powered by Disqus


Trending now »

Hot discussions in our forums right now:

Driving an automatic - do you use one foot or both?
Created by geekIT, last reply by Batman on 21-Sep-2017 17:41 (108 replies)
Pages... 6 7 8


Auckland Airport fuel supply obliterated by digger
Created by Batman, last reply by Batman on 21-Sep-2017 17:47 (205 replies)
Pages... 12 13 14


iPhone 8/iPhone X, impressions?
Created by surfisup1000, last reply by Batman on 21-Sep-2017 18:29 (364 replies)
Pages... 23 24 25


How to backup/copy an iphone app?
Created by Batman, last reply by scuwp on 19-Sep-2017 19:37 (24 replies)
Pages... 2


IOS 11 email client and Office 365 - heads up people
Created by gjm, last reply by mattwnz on 20-Sep-2017 17:15 (18 replies)
Pages... 2


When did we become America
Created by BTR, last reply by Batman on 21-Sep-2017 19:04 (53 replies)
Pages... 2 3 4


Mighty Ape Birthday hunt 2017
Created by ThePlague, last reply by ThatDamnYellowOne on 21-Sep-2017 18:40 (16 replies)
Pages... 2


Sky blames piracy for lost customers. Sky: it's time to wake up and smell the coffee.
Created by kingdragonfly, last reply by Rikkitic on 21-Sep-2017 11:10 (482 replies)
Pages... 31 32 33