WikiLeaks - The Hackingteam Archives

Today, 8 July 2015, WikiLeaks releases more than 1 million searchable emails from the Italian surveillance malware vendor Hacking Team, which first came under international scrutiny after WikiLeaks publication of the SpyFiles. These internal emails show the inner workings of the controversial global surveillance industry.

Search the Hacking Team Archive

Linux USB pwn

Email-ID	227462
Date	2013-09-12 08:26:55 UTC
From	[email protected]
To	[email protected], [email protected], [email protected], [email protected], [email protected]

Email Body
Raw Email

"A local user with physical access to the system could use this flaw to crash the system resulting in DoS or, potentially, escalate their privileges on the system." "Linux kernel built with the Human Interface Device bus (CONFIG_HID) support is vulnerable to a memory corruption flaw. It could occur if an HID device sends malicious HID report with the Report_ID of greater than 255." http://www.immunityinc.com/ceu-index.shtml: - Source code to build a teensy++ board based exploit for (CVE-2013-2888) - Paper on how to practically exploit the Linux core HID driver vulnerability (CVE-2013-2888) Ivan -- Ivan Speziale Senior Software Developer Hacking Team Milan Singapore Washington DC www.hackingteam.com email: [email protected] mobile: +39 3669003900

Message-ID: <[email protected]>
Date: Thu, 12 Sep 2013 10:26:55 +0200
From: Ivan Speziale <[email protected]>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:10.0.12) Gecko/20130116 Icedove/10.0.12
To: Marco Valleri <[email protected]>, Antonio Mazzeo
	<[email protected]>, Diego Giubertoni <[email protected]>,
	Guido Landi <[email protected]>, Fabio Busatto
	<[email protected]>
Subject: Linux USB pwn
Status: RO
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="--boundary-LibPST-iamunique-1097933725_-_-"


----boundary-LibPST-iamunique-1097933725_-_-
Content-Type: text/plain; charset="ISO-8859-1"

"A local user with physical access to the system could use this flaw to
crash the system resulting in DoS or, potentially, escalate their
privileges on the system."

"Linux kernel built with the Human Interface Device bus (CONFIG_HID)
support is vulnerable to a memory corruption flaw. It could occur if an
HID device sends malicious HID report with the Report_ID of greater than
255."


http://www.immunityinc.com/ceu-index.shtml:

- Source code to build a teensy++ board based exploit for (CVE-2013-2888)
- Paper on how to practically exploit the Linux core HID driver
vulnerability (CVE-2013-2888)


Ivan
-- 
Ivan Speziale
Senior Software Developer

Hacking Team
Milan Singapore Washington DC
www.hackingteam.com

email: [email protected]
mobile: +39 3669003900


----boundary-LibPST-iamunique-1097933725_-_---