Wireless Vulnerabilities & Exploits
Wireless Vulnerabilities & Exploits
WVE ID: WVE-2005-0004
Type: Exploit
Status: Candidate
Classification:
Authentication Management
Hijacking
Information Disclosure
Description:
Blooover is a proof-of-concept tool that can be used to exploit cellular phones that are vulnerable to the BlueSnarf and BlueBug attacks.
Discussion:
Bloover is a tool intended for auditing devices for BlueSnarf and BlueBug vulnerabilities. It's unique feature is that it is implemented using the J2ME specification for mobile devices allowing the tool to run on any device supporting the J2ME MIDP 2.0 VM and the JSR-82 Bluetooth API. This allows one to inconspicuously scan for vulnerable devices without drawing the attention of others by carrying a laptop.
As this is intended to be an auditing tool, some functionality has been disabled. For instance, the tool does not allow the sending of SMS messages and making toll calls through a vulnerable device.
Credits
Author:
Martin
Herfurt
(martin@trifinite.org)
: trifinite.org
References
URL:
http://trifinite.org/trifinite_stuff_blooover.html
Released: 2005-03-07
Submitter
Andrew
Lockhart
(alockhart@networkchemistry.com)
: Network Chemistry
Submitted: Mon Oct 24 09:54:47 -0700 2005
Candidate Date: Thu Oct 06 14:04:13 -0700 2005
