[Dshield] XBox have the PnP bug?

Joel Esler eslerj at gmail.com
Wed Aug 17 20:18:32 GMT 2005


The bug is not "UPnP" it's "pnp" different.  but that would be
interesting to find out no?

On 8/17/05, stu <secmail at patchsupplier.dyndns.org> wrote:
> I was also thinking of XP Embedded. I ran a honeypot here with XP (no
> patches at all) and it got compromised quite quickly, the first few
> attempts caused it to reboot then it got infected.
> 
> I'm not totally up to speed with embedded but do you not have to create
> a new image of the OS for each update to it? I'm thinking along the
> lines of POS (point of sale) devices on lans etc. Would be interesting
> to walk into your local staples and see their POS rebooting.
> 
> Anyone else upto speed on XPe?
> 
> Stu
> 
> 
> -----Original Message-----
> From: list-bounces at lists.dshield.org
> [mailto:list-bounces at lists.dshield.org] On Behalf Of Fergie (Paul
> Ferguson)
> Sent: 17 August 2005 16:37
> To: mcgoy at plumbearcat.com
> Cc: list at lists.dshield.org
> Subject: Re: [Dshield] XBox have the PnP bug?
> 
> That's a good question. :-)
> 
> I had read somewhere (on hack mods) that the XBox ran,
> basically, a "special" Win2k kernel, so no idea if this
> has the PnP vulnerability...
> 
> - ferg
> 
> 
> -- "David McGaughey" <mcgoy at plumbearcat.com> wrote:
> 
> 
> Anyone know if the Xbox has the PnP bug?  I'm sure the current exploit
> doesn't work against them, but was curious if anyone heard if the XBox
> needed a patch.  Only asking because I've seen a lot of UPnP traffic
> from an
> Xbox.
> 
> David McGaughey
> Lubbock, Texas
> mcgoy at plumbearcat.com
> 
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet
>  fergdawg at netzero.net or fergdawg at sbcglobal.net
>  ferg's tech blog: http://fergdawg.blogspot.com/
> 
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> 
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
>



More information about the list mailing list