Members
  • Total Members: 12814
  • Latest: Rono
Stats
  • Total Posts: 28517
  • Total Topics: 8240
  • Online Today: 976
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)












Author Topic: HTC Android phones can leak Wi-Fi passwords  (Read 990 times)

0 Members and 1 Guest are viewing this topic.

Pez

  • SCF VIP Member
  • *****
  • Posts: 723
  • KARMA: 116
  • Gender: Male
  • Pez
HTC Android phones can leak Wi-Fi passwords
« on: 03. February 2012., 09:06:47 »
HTC Android users beware! Attackers have created rogue applications that when downloaded can steal your phone’s Wi-Fi credentials and passwords. Be careful which applications you download and read other users’ reviews first. If you think your phone has already been compromised, visit HTC’s support site for help.
 
Exposed 802.1X credentials can be picked off by rogue applications

A group of HTC Android phones is susceptible to an exploit that can steal Wi-Fi credentials and passwords and send them to attackers.
 
The exploit relies on attackers creating rogue applications to take advantage of vulnerabilities in the Android build HTC uses on some of its phones, according to a post by the United States Computer Emergency Readiness Team (US-CERT).
 
Users with affected phones should go to HTC's support site for software updates, US-CERT says.
 
The affected Android builds expose 802.1X passwords to applications on the phones that have permission to access the Wi-Fi state of the phone. The flaw doesn't allow access to the 802.1X settings themselves, it does allow viewing Wi-Fi credentials, according to a description of the flaw at the My War With Entropy blog by Bret Jordan.
 
So an application could gain access to stored SSIDs of Wi-Fi networks, user names and passwords. If the application also has Internet-access privileges, it could send along the stolen credentials to attackers.
 
If the stolen credentials are for corporate networks, they could be used to target data on those business networks, Jordan writes.
 
According to US-CERT, affected phones are:
 ■Desire HD (both "ace" and "spade" board revisions) - Versions FRG83D, GRI40
■Glacier - Version FRG83
■Droid Incredible - Version FRF91
■Thunderbolt 4G - Version FRG83D
■Sensation Z710e - Version GRI40
■Sensation 4G - Version GRI40
■Desire S - Version GRI40
■EVO 3D - Version GRI40
■EVO 4G - Version GRI40
 
HTC and Google were told about the flaw last September and have been working to fix the problem and arrange for public disclosure. Jordan describes the companies as responsive and good to work with.

Orginal article: http://www.infoworld.com/d/mobile-technology/htc-android-phones-can-leak-wi-fi-passwords-185542

---

TIPS: Tricks for upgrading your Android phone  


--- edited by Admin ---


Their is two easy way to configure a system!
Every thing open and every thing closed.
Every thing else is more or less complex.

Start Turfing ! http://scforum.info/index.php/topic,8405.msg21475.html#msg21475

Samker's Computer Forum - SCforum.info

HTC Android phones can leak Wi-Fi passwords
« on: 03. February 2012., 09:06:47 »




Samker

  • SCF Administrator
  • *****
  • Posts: 7206
  • KARMA: 291
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
Re: Download The Best Free AntiVirus for Android phone
« Reply #1 on: 03. February 2012., 17:54:53 »


It's also good idea for all Android users to immediately install some Anti-Virus... here they have few excellent FREE solutions: http://scforum.info/index.php/board,28.0.html


 

With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Verification:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising