Re: Security with USB Devices

From: Frederic Charpentier (fcharpen_at_xmcopartners.com)
Date: 07/27/05

  • Next message: Soszynski, Chris: "RE: IPS comparison" 
    Date: Wed, 27 Jul 2005 10:33:25 +0200
To: pen-test@securityfocus.com

    Hi list !

    The Usb drivers flaws : http://www.eweek.com/article2/0,1759,1840131,00.asp

    A commercial USB with autorun feature :
    http://www.udrw.com/

    Fred. 

    -- 
Frederic Charpentier - Xmco Partners
Security Consulting / Pentest
web  : http://www.xmcopartners.com
Michael Parker wrote:
> There was recently (Monday of this week) a vulnerability disclosed with regards to a flaw in the USB driver that affected Windows systems (verified) and *nix systems (suspected). I don't have a directlink but it was on slashdot. 
> 
> 
> 
> Michael Parker, BA (Hon), GSEC, MBCS
> 
> Information Security Coordinator
> Research In Motion
> 
> Phone: 519.888.7465
> Cell: 519.573.4782
> mparker@rim.com
> 
> 
> 
> -----Original Message-----
> From: NewYork User <newyorkuser@gmail.com>
> To: pen-test@securityfocus.com <pen-test@securityfocus.com>
> Sent: Tue Jul 26 10:51:40 2005
> Subject: Security with USB Devices
> 
> List, 
> 
> Does any one know a good program to "autorun" from USB drive on a
> windows 2000 or an XP machine? I have tried the traditional
> Autorun.inf but didn't have any luck. I looked up in google but
> couldn't find any useful stuff. I saw some commercial programs to use
> for backup etc..But its not of any use if I want to prove my point
> that data can be vulnerable if use of USB drives is not restricted
> either by using a program or any kind of security control. I created a
> simple batch file to open up a Netcat listener. It is pretty common
> for the users lock their machines and leave their desks. I'm looking
> for any kind of scripts that can run a batch file automatically or can
> copy the data automatically. Any ideas?
> 
> Thanks for your help.
> 
> 
> 
> 
> ---------------------------------------------------------------------
> This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.
> 
-- 
Frederic Charpentier - Xmco Partners
Security Consulting / Pentest
web  : http://www.xmcopartners.com
  • Next message: Soszynski, Chris: "RE: IPS comparison"

    Relevant Pages

    • [Fwd: Re: Security procedure question]
      ... case is the need to re-clone the laptop and lose some number of unmerged ... Subject: Security procedure question ... So indirectly biometrics ... In the case where the USB fingerprint reader is stolen with the ...
      (Security-Basics)
    • Re: Basic Windows Security Question
      ... I see more and more firms that disable USB due to the large security risks ... Subject: Basic Windows Security Question ... Suppose you have a small company of less than 100 employees. ... to prevent the use of thumb drives and other specific devices through ...
      (Security-Basics)
    • RE: Hidden Copying Software
      ... admin rights on the LAN and then waited for the Prof to connect the USB ... to write and on USB v2 very fast - even on big drives. ... Concerned about Web Application Security? ... You have an option to go with a managed service (Cenzic ...
      (Pen-Test)
    • Re: Security procedure question
      ... All it is does is make the logon process easier and simpler. ... improves the security of the mobile devices when used in conjunction ... In the case where the USB fingerprint reader is stolen with the laptop, ... a careless user could take it down to single-factor authentication. ...
      (Security-Basics)
    • Re: XP/USB Security Worries
      ... As long as you do not copy any files from your USB storage ... run the following program after using the laptop ... System Security Suite is a program designed to remove internet tracks ... | a second laptop...hence the USB Card ...
      (microsoft.public.windowsxp.security_admin)