ActiveSynch two vulnerabilities in Microsoft's program Sychnchronization between PC and mobile devices
Date:
June 1, 2008
Name of risk:
ActiveSync.
Manufacturer (if applicable):
Microsoft Corp.
Description:
ActiveSync is a synchronization program developed by Microsoft. It allows a mobile device to be synchronized with a desktop or a server running FirstClass Collaboration Suite, Microsoft Exchange Server, PostPath email and collaboration servers, Kerio MailServer, Zimbra or push-Z. Only the personal information manager (PIM) data (email / calendar / contacts) can be synchronized with the Exchange Server. (Tasks can also be synchronized with Exchange Server on Windows Mobile 5.0.) Option PC synchronization, however, allows PIM synchronization with Microsoft Outlook, along with Internet "favorites", files and tasks among other types of data. Mobile devices include PDAs or Smartphone with Windows Mobile or Windows CE operating system, along with devices that do not use a system Microsoft operating platforms such as Symbian and the iPhone. ActiveSync also provides manual file transfer to a mobile device, along with limited backup and restore functionality and the ability to install and uninstall mobile device applications.
At a special event to launch the iPhone SDK March 6 2008, Apple announced that use ActiveSync technology to enable synchronization between iPhone and Microsoft Exchange Server.
Alternative software that allows mobile devices to synchronize non-Microsoft PIMs with a PC is also available, as BirdieSync FinchSync and Thunderbird, or Intellisync.
Starting with Windows Vista, the latest version of the Windows operating system, ActiveSync has been replaced by the Windows Mobile Device Center.
The software can be downloaded Free Web Site Microsoft ActiveSync. The help is generally provided by the manufacturer of the device and the cost of this support depends on your policy.
Vulnerabilities
Two vulnerabilities were identified in Microsoft ActiveSync (version 3.7.1 and earlier), which could be exploited by malicious people to disclose information sensitive or cause a denial of service.
The first issue is due to a design error when sending authentication responses, which could be exploited by attackers to enumerate valid equipment IDs by sending specially crafted requests to port 5679 and review the answers.
The second vulnerability occurs when numerous attempts are made to initialize with ActiveSync (port 5679/TCP), which could be exploited by remote attackers to cause a denial service.
Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a wrench) when sending the PIN / Password via the USB connection from your computer to the device, which could make it easier for hackers to decode a PIN / Password obtained by inhalation or spoofing the pairing process.
Systems Affected:
Microsoft Windows.
Risk Level:
Less critical (2).
Type of threat
Denial of service attacks, sniffing.
Link:
http://en.wikipedia.org/wiki/ActiveSync
Apple iPhone OS 4.0 new release preview.flv
mobile phones
Apple iPhone with OS 4.0 outstanding preview[latest 2010].flv
|
|
Phone App Fridge Magnets $2.34 These hilarious App Magnets will make your fridge look like a giant iPhone! An ideal way to decorate any metallic surface, these novelty magnets will hold messages, postcards, photos or just look great on their own. These geeky gifts are ideal for Birthdays, stocking fillers, secret santa gifts and more! Why not stick them on your filing cabinet at work and put a photo under the photo app magnet, … |
|
|
App Magnets $1.50 Because youre used to apps for everything else you want to do, why not use these handy app magnets for keeping a take out menu handy on the microwave, posting your kids art on the fridge, and making sure your grocery list stays put on the freezer. Replicas of the apps you know and love, these magnets are the perfect gift for diehard fans of the iPhone. Includes 18 individual epoxy magnets each mea… |
|
|
United Solutions Plastic Cutlery Tray and Utensil Organizer, White $2.99 Argyle Skin for iPhone 4 is a semi-hard, semi-soft, cover with a stylish glossy finish. Argyle Skin gives your iPhone the slick look of a hard case while providing shock-absorbing protection. + Includes a ebigvalue (TM) Determination Hand Strap / Key Chain…. |
|
|
Based on a True Story $6.99 All products are BRAND NEW and factory sealed. Fast shipping and 100% Satisfaction Guaranteed…. |
|
|
Iphone 4 Designer Case Protect your phone from scuffs and scratches with this hard shell case with a stylish pink zebra stipe. The case easily slides around your phone…. |
|
|
Genuine MOFI Fashion Pouch for iPhone 4 – GREY $4.50 These elegant MOFI Fashion Cases have been one of the best selling pouches in the Asia retail market for over two years, yet little is known about these premium high end cases in the west. The plush materials are full of luxurious touches and the build quality is second to none, words and pictures alone can not do these cases justice. The whole experience of owning and using these products is a re… |
|
|
Belkin Mini Surge Protector Dual USB Charger $13.30 Protect your electronic devices while traveling…. |
|
|
Silverhill 20 Piece Tool Kit for Apple Products $9.99 New from Silverhill Tools is a useful kit that helps with doing many of the routine tasks associated with Mac ownership, including accessing memory slots or opening housings. Includes 5 screwdrivers: Pentalobe size 1, Pentalobe size 5, flat, phillips, and Triwing. Includes 9 L keys: 3 hex keys and 6 star keys. 2 Spudgers. Sim adapter kit for reducing your SIM to a microsim, including SIM ejec… |
|
|
Wireless IP Pan/Tilt/ Night Vision Internet Surveillance Camera Built-in Microphone With Phone remote monitoring support(Black) $46.88 Specs: Image Compression Format: M-JPEG standard Image Resolution: VGA(640×480) / QVGA(320×240) Sensor: 1/4 inch CMOS, 300,000 Pixels Light frequency: 50Hz, 60Hz or Outdoor Audio compression: ADPCM Data rate: 802.11b: 11Mbps (Max.), 802.11g: 54Mbps (Max.) Ethernet: One 10/100Mbps RJ-45 Viewing angle: 67? Horizontal Rotating Angle: 0~270? Vertical Rotating Angle: 0~120? Alarm Mode: motion detection… |
|
|
60 Minutes – Steve Jobs $17.95 Airdate: 10/23/11 His products — the Mac, iPhone, iPad and others — forever changed the way we think about technology. But how should we think about the man behind them, Apple’s hard-driving co-founder Steve Jobs? In the years before his death, Jobs granted biographer Walter Isaacson more than 40 interviews, many recorded on tape. The result, as Steve Kroft reveals in this two-part story, is a … |
Comments on this entry are closed.