Vulnerability Development mailing list archives

Palm Bean Lock feature


From: Christian <christian () dijkstra murdoch edu au>
Date: Sun, 17 Dec 2000 11:59:46 +0800

Hi,

Recently on BUGTRAQ, when discussing a vulnerability with a certain
piece of Palm software, it was mentioned that:

  * If an attacker obtains access to the user's Palm device he can copy
    via IrDA (infrared), or "beam", the "sceiddb.pdb" file. By default
    this file does not have the "Beam Lock" protection bit set. This
    bit tells the PalmOS not to allow the beaming of the file. But the
    "Beam Lock" protection can be easily disabled.

Does anyone know how this "beam lock" protection is enabled/disabled?  I
can't find any way of doing it via the ordinary interface so I assume
it's a little more sophisticated than this.

Regards,

Christian.


Current thread: