SecurityFocus

Firewire Attack on Windows Vista Mar 05 2008 03:53PM
Bernhard Mueller (research sec-consult com) (2 replies)

RE: Firewire Attack on Windows Vista Mar 05 2008 09:30PM
Roger A. Grimes (roger banneretcs com) (4 replies)

RE: Firewire Attack on Windows Vista Mar 06 2008 10:01AM
bzhbfzj3001 sneakemail com (1 replies)

Re: Firewire Attack on Windows Vista Mar 07 2008 07:51AM
Tonnerre Lombard (tonnerre lombard sygroup ch) (1 replies)

Re: Firewire Attack on Windows Vista Mar 07 2008 06:59PM
Nathanael Hoyle (nhoyle hoyletech com)

Re: Firewire Attack on Windows Vista Mar 06 2008 07:54AM
Tonnerre Lombard (tonnerre lombard sygroup ch)

Re: Firewire Attack on Windows Vista Mar 06 2008 12:57AM
Daniel O'Connor (doconnor gsoft com au)

Re: Firewire Attack on Windows Vista Mar 06 2008 12:37AM
Peter Watkins (peterw usa net) (1 replies)

RE: Firewire Attack on Windows Vista Mar 06 2008 05:50PM
Larry Seltzer (Larry larryseltzer com) (2 replies)

RE: Firewire Attack on Windows Vista Mar 06 2008 09:11PM
Thor (Hammer of God) (thor hammerofgod com)

Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 06 2008 08:00PM
Tim (tim-security sentinelchicken org) (2 replies)

RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 07 2008 05:42PM
Thor (Hammer of God) (thor hammerofgod com) (1 replies)

RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 07 2008 07:40PM
Thor (Hammer of God) (thor hammerofgod com) (1 replies)

RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 07 2008 07:44PM
Larry Seltzer (Larry larryseltzer com) (1 replies)

RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 07 2008 07:51PM
Larry Seltzer (Larry larryseltzer com)

RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 06 2008 08:13PM
Larry Seltzer (Larry larryseltzer com) (1 replies)

Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 06 2008 08:20PM
Tim (tim-security sentinelchicken org) (1 replies)

> >>...Windows would not do this. It would only open up access to devices
> that it thought needed DMA. This is why Metlstorm had to make his Linux
> machine behave like an iPod to fool Windows into spreading it's legs.
>
> So the iPod software opens up the whole address space? I don't get it.

No, the iPod device signature makes Windows drivers think it should
allow DMA access for that device because it detect it as a disk device.
Other disk device signatures would likely work the same way, that's just
the one he happened to emulate.

tim

[ reply ]

RE: [Full-disclosure] Firewire Attack on Windows Vista Mar 06 2008 08:35PM
Larry Seltzer (Larry larryseltzer com) (1 replies)

Re: [Full-disclosure] Firewire Attack on Windows Vista Mar 06 2008 08:44PM
Tim (tim-security sentinelchicken org)

Re: Firewire Attack on Windows Vista Mar 05 2008 06:29PM
Thierry Zoller (Thierry Zoller lu)