Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Airscanner Reveals Possible Security Vulnerability With Spb Kiosk
Posted on 25-Dec-2005 23:16 | Tags Filed under: News



Security firm Airscanner has disclosed details of two possible vulnerabilities on Spb Kiosk Engine. The software is used by enterprise clients to lockdown Windows Mobile Pocket PC devices.

The Spb Kiosk Engine allows users to run custom applications in kiosk mode. In this mode, the target applications are the only ones that can be used on a specific Pocket PC device.

In one of the advisories, Airscanner warns users that despite the device lockdown, it is still possible to execute programs via 'features' of the running application (eg. Pocket Word will execute programs via hyperlink). In addition, autorun is still enabled on the devices, which allows anyone with a SD Card or CF card to execute their own code on the device.

Administrators should disable autorun on the device by placing an autorun.exe file in the \windows directory with read-only options.

Another vulnerability is related to how the software stores an administrator's password on the device.

Advisories can be found here and here.




comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

The President Of The USA: Donald Trump
Created by TimA, last reply by MikeB4 on 20-Feb-2017 10:32 (3053 replies)
Pages... 202 203 204


Shameful politics, shameless politicians
Created by Rikkitic, last reply by Rikkitic on 20-Feb-2017 10:12 (102 replies)
Pages... 5 6 7


Silly Cricket Scoring
Created by tdgeek, last reply by Jase2985 on 20-Feb-2017 10:17 (14 replies)

Upgrade Home Wifi Network
Created by Dulouz, last reply by michaelmurfy on 19-Feb-2017 13:36 (14 replies)

Anyone went from a dSLR to mirrorless for most of your photography?
Created by rayonline, last reply by Camden on 17-Feb-2017 22:02 (10 replies)

AntiVirus - If I have a choice?
Created by jackyleunght2002, last reply by Lias on 16-Feb-2017 17:48 (30 replies)
Pages... 2


Lenovo NZ absolutely awful, or is it me?
Created by surfisup1000, last reply by muttley68 on 18-Feb-2017 11:05 (37 replies)
Pages... 2 3


Vodafone you've done it again - John Reader (johnr) is leaving
Created by thecatsgoolies, last reply by DeepBlueSky on 16-Feb-2017 15:29 (72 replies)
Pages... 3 4 5