On Thu, 14 Sep 2000, Jeff Waugh wrote:
> > AT {You should get an "OK" reply}
> > ATS0=3 {Again, you should get an OK reply from the modem}
>
>
> Is there a difference between incoming and outgoing? I've always been able
> to *receive* <insert naughty bits here>, but I just tried to send another
> example I'd seen and the obvious happened. ;)
Theoretically, no. In fact, the most common exploit of this weakness is
the "ping of death" - you insert the data type for the "+ + +ATH0" into
your ping, and you could disconnect other modems simply by issuing the
command.
> Basically the example was a combination of all the sick and twisted headers
> you could imagine. The ATH attack, an internet TV "make this email's text
> and background black with CSS" header, and one to wrap up the mail into an
> unreadable attachment when viewing it in Outlook Express.
Interesting. Maybe your modem obeys the guard tone requirements on
incoming, but not on outgoing traffic? I dunno.
DaZZa
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
