AT+XAPP Vulnerability - Revision history

5urd at 23:48, 22 January 2013

2013-01-22T23:48:58Z

2012-12-24T21:01:46Z

2011-02-19T15:59:03Z

2010-11-29T08:58:26Z

‎Implementation

2010-11-28T22:25:10Z

2010-08-04T18:41:53Z

2010-07-20T11:51:15Z

link

2010-07-20T11:39:33Z

links

2010-07-10T21:31:40Z

2010-07-10T20:15:52Z

@@ Line 1: / Line 1: @@
-Used as an injection vector for the [[X-Gold 608]] and [[XMM 6180]] [[unlock]] payload. ‬Currently available in all X-Gold 608 basebands until [[5.13.04]] and [[6.15.00]], and XMM 6180 baseband [[1.59.00]].‬
+Used as an injection vector for the [[X-Gold 608]] and [[XMM 6180]] [[unlock]] payload. ‬Currently available in all X-Gold 608 basebands until [[05.13.04]] and [[06.15.00]], and XMM 6180 baseband [[01.59.00]].‬
 ‭
 == Credit ==
@@ Line 13: / Line 13: @@
 == Implementation ==
-The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1 and 1.2, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]], [[5.13.04]] and [[6.15.00]](ultrasn0w 1.2 only), and [[XMM 6180]] baseband [[1.59.00]].
+The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1 and 1.2, which is able to unlock the [[X-Gold 608]] basebands [[04.26.08]], [[05.11.07]], [[05.12.01]], [[05.13.04]] and [[06.15.00]](ultrasn0w 1.2 only), and [[XMM 6180]] baseband [[01.59.00]].
 {{stub|exploit}}
 [[Category:Baseband Exploits]]

@@ Line 15: / Line 15: @@
 The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1 and 1.2, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]], [[5.13.04]] and [[6.15.00]](ultrasn0w 1.2 only), and [[XMM 6180]] baseband [[1.59.00]].
-{{stub|iPhone}}
+{{stub|exploit}}
 [[Category:Baseband Exploits]]

@@ Line 14: / Line 14: @@
 == Implementation ==
 The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1 and 1.2, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]], [[5.13.04]] and [[6.15.00]](ultrasn0w 1.2 only), and [[XMM 6180]] baseband [[1.59.00]].
 [[Category:Baseband Exploits]]

@@ Line 13: / Line 13: @@
 == Implementation ==
-The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]], [[5.13.04]] and [[6.15.00]], and [[XMM 6180]] baseband [[1.59.00]].
+The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1 and 1.2, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]], [[5.13.04]] and [[6.15.00]](ultrasn0w 1.2 only), and [[XMM 6180]] baseband [[1.59.00]].
 ----
 [[Category:Baseband Exploits]]

@@ Line 1: / Line 1: @@
-Used as an injection vector for the [[X-Gold 608]] and [[XMM 6180]] [[unlock]] payload. ‬Currently available in all X-Gold 608 basebands until [[5.13.04]], and XMM 6180 baseband [[1.59.00]].‬
+Used as an injection vector for the [[X-Gold 608]] and [[XMM 6180]] [[unlock]] payload. ‬Currently available in all X-Gold 608 basebands until [[5.13.04]] and [[6.15.00]], and XMM 6180 baseband [[1.59.00]].‬
 ‭
 == Credit ==
@@ Line 13: / Line 13: @@
 == Implementation ==
-The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]] ‬and [[5.13.04]], and [[XMM 6180]] baseband [[1.59.00]].
+The exploit was used by [[iPhone Dev Team]] in [[ultrasn0w]] 1.0-1, which is able to unlock the [[X-Gold 608]] basebands [[4.26.08]], [[5.11.07]], [[5.12.01]], [[5.13.04]] and [[6.15.00]], and [[XMM 6180]] baseband [[1.59.00]].
 ----
 [[Category:Baseband Exploits]]

@@ Line 3: / Line 3: @@
 == Credit ==
-* '''vulnerability''': [[sherif_hashim]], also discovered by [[westbaer]], [[User:Geohot|geohot]] and [[Oranav]] (each one independently)
+* '''vulnerability''': [[sherif_hashim]], also discovered by [[westbaer]], [[User:Geohot|geohot]] and [[User:Oranav|Oranav]] (each one independently)
 * '''exploitation''': [[iPhone Dev Team]]

← Older revision		Revision as of 21:31, 10 July 2010
Line 10:		Line 10:
	There is a stack overflow in the AT+XAPP‭="..." ‬command‭, ‬which allows unsigned code execution on the [[X-Gold 608]] and [[XMM 6180]].		There is a stack overflow in the AT+XAPP‭="..." ‬command‭, ‬which allows unsigned code execution on the [[X-Gold 608]] and [[XMM 6180]].

		+	at+xapp="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4444555566667777PPPP"
−	at+xapp="‬0000111122223333444455556666777788889999000011112222"‬

	Applying a string of more than 52‭ ‬characters will trigger the overflow.		Applying a string of more than 52‭ ‬characters will trigger the overflow.

← Older revision		Revision as of 20:15, 10 July 2010
Line 14:		Line 14:
	Applying a string of more than 52‭ ‬characters will trigger the overflow.		Applying a string of more than 52‭ ‬characters will trigger the overflow.

		+	It also exists on the [[XMM 6180]]

	== Implementation ==		== Implementation ==