full-disclosure - Re: Firewire Attack on Windows Vista

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 6 Mar 2008 12:29:18 -0800
From: Tim <tim-security@...tinelchicken.org>
To: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Firewire Attack on Windows Vista

An anonymous list lurker asked me off-list to answer this question for
"public gratification":

> Can this feature be leveraged without drivers on the target system?
> IOW, if one just unloads (or doesn't load) the firewire driver, is it
> still exploitable?

No, I don't believe so.  At least on Linux, the drivers have to
explicitly open up access when they are loaded for the attack to work.
By the chipset access restrictions are prevent this.

Of course YMMV on particular pieces of hardware.  There's just one
vendor (Texas Instruments) who produces the vast majority of these
chipsets though, so I doubt there's a large amount of variation from
system to system.

tim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/