Re: Firewire Attack on Windows Vista

[Tim <tim-security () sentinelchicken org>]

An anonymous list lurker asked me off-list to answer this question for
"public gratification":

> Can this feature be leveraged without drivers on the target system?
> IOW, if one just unloads (or doesn't load) the firewire driver, is it
> still exploitable?

No, I don't believe so.  At least on Linux, the drivers have to
explicitly open up access when they are loaded for the attack to work.
By the chipset access restrictions are prevent this.

Of course YMMV on particular pieces of hardware.  There's just one
vendor (Texas Instruments) who produces the vast majority of these
chipsets though, so I doubt there's a large amount of variation from
system to system.

tim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/