Microsoft ActiveSync multiple vulnerabilities
Published:		02.08.2005
Source:		Natalia Melnikova
SecurityVulns ID:		5064
Type:		m-i-t-m
Level:		5/10
Description:		During synchronization with broadcast media (LAN or Wi-Fi) all data, including authentication is sent cleartext and it's possible to spoof client or server. It's possible to access device without password, DoS.

Affected:		MICROSOFT : ActiveSync 3.8
		MICROSOFT : ActiveSync 3.71

Original document		SECUNIA, [SA16283] Microsoft ActiveSync Denial of Service and Equipment ID Enumeration (02.08.2005)
		Natalia Melnikova, Microsoft ActiveSync clear text password (02.08.2005)

Discuss:

Read or add your comments to this news (0 comments)