GPRS vulnerabilities

From: Viraf Hathiram (Viraf.Hathiram@optus.com.au)
Date: 01/30/02 

From: Viraf Hathiram <Viraf.Hathiram@optus.com.au>
To: pen-test@securityfocus.com
Date: Wed, 30 Jan 2002 16:40:50 +1100

G'day folks

We've talked about the air interface and the sim cards of GSM in an earlier
discussion. I'm just getting acquainted with GPRS and would like to know if
there are documented cases of the GPRS backbone (GGSN, DNS, etc.) being
attacked from a mobile node.

For those not familiar with GPRS, the network looks like this:

laptop--mobile phone--GSM network--SGSN--GGSN--Internet and several
Intranets

The GGSN is effectively a router and is the first IP device encountered by
the laptop. It could have firewall and DHCP functions. It connects to a
DNS, charging gateway, NMS, etc.

Regards
Viraf

Viraf K. Hathiram
Information Security Specialist
'yes' Optus
Tel: (+61-2) 9342-7002 (forwards to mobile)
Fax: (+61-2) 9342-8546
Viraf.Hathiram@optus.com.au

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)