Skip to content

Master issue for THARD-2 #28

Open
Open

Description

@Rafiot

Review of the attack surface on the rPI (e.g. power analysis)

Activity

  1. moshekaplan commented on Feb 10, 2017

    @moshekaplan
    • Exploiting libmagic
      • Writing a malicious binary to the second USB
      • Returning a fake MIMEtype
  2. Rafiot commented on Feb 11, 2017

    @Rafiot
    MemberAuthor

    I didn't see any recent vulnerability in libmagic allowing command execution. Do you have references?

    Fake MIMEtype is assumed, we use it for information and cross check with the extension of the file (see polyglot files).

  3. moshekaplan commented on Feb 12, 2017

    @moshekaplan

    Unfortunately, this is the only reference I could find : https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2014-1606 , but it only has DoS and no code execution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions