Verizon Wireless Bug Allows Text Message Tapping

Wednesday, 23 July 2003 18:06 EST

Bridgeton, NJ, July 23, 2003 - ThreeZee Technology, Inc., a security research firm, announced today that they have located a bug within the Verizon Wireless Text Messaging system. The bug will allow any person to easily view mass lists of SMS messages sent to Verizon™ Cellular customers, including the telephone number and the text in the message. The applications of the bug can be extended to signing the phone up for an online login at www.VText.com, thus gaining the ability to intercept messages sent to the phone, as well as the ability to make numerous charges to the customer's phone bill.

Due to security concerns, the full details of the bug have not been disclosed at this time. However, a detailed document of advisory has been published at the web site of the company.

Verizon SMS Bug information is available at http://www.ThreeZee.com

Direct link to HTML advisory:
http://www.threezee.com/modules.php?op=modload&name=Sections&file=index&req=viewarticle&artid=6&page1

Direct link to TEXT advisory:
http://www.threezee.com/sections/security/tzt001.txt

GFI LANguard Network Security Scanner - Is your network open to attack? Find out with the #1 sold network security scanner: GFI LANguard Network Security Scanner! Download your FREE trial version today.

Visit GFI Security Software page for more information.

FREE IP PBX: 3CX VOIP Phone System for Windows. No timeouts or limitations

Latest News

eEye released integer overflow auditing tool
16.02.07  Vulnerability research company eEye Security has released a free security vulnerability auditing tool that helps spotting possible integer overflow vulnerabilities.

AES Password Manager 2.3 released
16.02.07  AES software has announced the availability of AES Password Manager 2,3, the latest version of their password management application that allows users automatically access password-protected web sites and email accounts.

IBM safeguards against Microsoft vulnerabilities
16.02.07  IBM’s security division, Internet Security Systems, offers protection from several critical vulnerabilities announced by Microsoft.

Firefox cookie-stealing vulnerability
15.02.07  A new zero-day vulnerability in Mozilla Firefox allows malicious web sites to forge authentication cookies for certain web sites.

Valentine’s Day: a powerful lure for spreading malware
09.02.07  As Valentine´s Day approaches, users should keep a wary eye on any romantic messages received by email, as many of them could contain malicious code.

Skype reads out your BIOS data
09.02.07  The Windows version of the Voice-over-IP software Skype reads and stores the BIOS and motherboard serial number of a user’s computer.

Utimaco SafeGuard Enterprise supports BitLocker
09.02.07  Utimaco has announced that its SafeGuard Enterprise now supports Windows Vista BitLocker drive encryption.

Top | RSS Feeds | About Us