xSellize: HOW TO: Fix The PDF Exploit After Jailbreaking With JailbreakMe - xSellize

Jump to content




Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

HOW TO: Fix The PDF Exploit After Jailbreaking With JailbreakMe

#1
User is offline   soh20 
Posted 02 August 2010 - 05:42 PM

  • Pwned
  • PipPipPipPipPipPipPipPipPipPip
  • Group: Members
  • Posts: 7318
  • Joined: 27-July 09
Posted Image

There was quite a buzz about this lately on the www , starting with MuscleNerd telling everybody not to attempt any jailbreaks using DefCon’s WiFi. So what exactly is happening? Basically when you jailbreak using JailbreakMe, the exploit is being downloaded on your iOS device as a .pdf file, and then executed by the system.



This doesn’t necessarily mean that your iOS device is at risk, but since the ports are still open, and right now this is a known ‘issue’ anybody can inject malicious software onto your device.

Basically, you should avoid downloading stuff you did not authorize , and do not click on links from your MobileSafari. If you want to go from page to page, manually type the address.

But let’s take it one step forward and fix this problem:

Change default password:

First of all, you should change your default password ( alpine ) . If you don’t know how to do that, check out this tutorial… ( this should be some kind of a habit every-time you jailbreak )

Close loophole:

1. Install OpenSSH ( if not already installed )
2. Download this .deb file
3. Via SSH , browse to /private/var/mobile/ and copy the .deb file
4. Now load MobileTerminal on Mac or Putty on Windows and install the .deb file:

ssh root @ your IP
alpine ( or your new password )
dpkg -i com.willstrafach.pdfexploitwarner_1.0.0-4_iphoneos-arm.deb

Here’s a tutorial on how to auto-install .deb files, so you don’t mess with terminal shells and putty

cdevwill, the guy that released the patch, said the fix will also be released in Cydia. So if you have any difficulties installing the .deb file ( you shouldn’t ) , wait for the Cydia release.

NOTE: by installing this patch, you will be asked anytime you want to open a .pdf file, if you really want to open it. If you downloaded the file from a trusted source, you can tap on ‘Load’ . Otherwise, tap on ‘Cancel’

NOTE: this exploit can affect non-jailbroken users as well. But the only way to fix it, is to jailbreak your iOS device. Check out our tutorial here…





[via fsm]
4

#Ads
User is online x-bot

  • Ad-Bot
  • Group:x-bot




#2
User is offline   dotAlexX 
Posted 02 August 2010 - 06:09 PM

  • Donator
  • PipPipPipPipPipPipPip
  • Group: +Contributor
  • Posts: 283
  • Joined: 05-March 10
I love how the only way to fix this security vulnerability is to have your device jailbroken, way to go apple.
Posted from iPhone
1

#3
User is offline   kest874 
Posted 02 August 2010 - 07:00 PM

  • Whats an iPhone
  • PipPip
  • Group: Members
  • Posts: 24
  • Joined: 15-October 09
Still waiting for my IP4 to ship, hope they don't fix this before the 19th....
0

#4
User is offline   noi80 
Posted 03 August 2010 - 05:00 AM

  • Donator
  • PipPipPipPipPip
  • Group: +Contributor
  • Posts: 73
  • Joined: 09-September 08
The title should be revised. It makes it sound like the PDF exploit results after the jailbreak. It should read something like "HOW TO: Fix the PDF Exploit (Jailbreak Required)".

Quote

"You can easily judge the character of a man by how he treats those who can do nothing for him."

-James D. Miles
0

#5
User is offline   mrmaff 
Posted 03 August 2010 - 10:58 AM

  • Donator
  • PipPip
  • Group: +Contributor
  • Posts: 14
  • Joined: 05-December 08
anyone else having problems with the clock.app after running this?
0

#6
User is offline   SeksiBeefpile 
Posted 03 August 2010 - 11:45 AM

  • Donator
  • PipPipPipPipPipPipPip
  • Group: +Contributor
  • Posts: 487
  • Joined: 07-February 10
This fix is also now up on Cydia.

mrmaff - what problems specifically are you experiencing? I installed the PDF fix from Cydia and I don't seem to be having any issues
-= If I helped you, thank me and click the (+)! =-_-= Proud xSellize VIP Donator =-_
-= iPhour 32gb Black 4.3.3 Jailbroken with redsn0w=-_-= iPhour 16gb Black 4.3.3 Jailbroken with jailbreakme.com=-_-= 3G 8gb 4.2.1 Jailbroken with Greenpois0n=-
0

#7
User is offline   mrmaff 
Posted 03 August 2010 - 12:13 PM

  • Donator
  • PipPip
  • Group: +Contributor
  • Posts: 14
  • Joined: 05-December 08
I have reinstalled the deb and the problems is still there. I get the view pdf warning message about 10 times then the clocks load as usual. The first time it happened the world clocks loaded but without hands.

Posted Image

I am on iPhone 4 with 4.0.1
0

#8
User is offline   DaiC1 
Posted 03 August 2010 - 12:13 PM

  • Donator
  • PipPipPipPipPip
  • Group: +Contributor
  • Posts: 69
  • Joined: 27-August 09

View PostSeksiBeefpile, on 03 August 2010 - 11:45 AM, said:

This fix is also now up on Cydia.

mrmaff - what problems specifically are you experiencing? I installed the PDF fix from Cydia and I don't seem to be having any issues


Is it "PDF Loading Warner" from BigBoss repo ?
If its not broken, fix it anyway!
0

#9
User is offline   SeksiBeefpile 
Posted 03 August 2010 - 01:18 PM

  • Donator
  • PipPipPipPipPipPipPip
  • Group: +Contributor
  • Posts: 487
  • Joined: 07-February 10

View Postmrmaff, on 03 August 2010 - 12:13 PM, said:

I have reinstalled the deb and the problems is still there. I get the view pdf warning message about 10 times then the clocks load as usual. The first time it happened the world clocks loaded but without hands.

Posted Image


I am on iPhone 4 with 4.0.1


Ahh yes I have the same issue with world clock. I just saw a tweet from cdevwill saying that he didn't realize the clock was using PDFs.

Here is the tweet: Dammit, I did nor account for some legacy apps such as "clock" using PDFs for vector graphics. Grrr.

This post has been edited by SeksiBeefpile: 03 August 2010 - 01:21 PM

-= If I helped you, thank me and click the (+)! =-_-= Proud xSellize VIP Donator =-_
-= iPhour 32gb Black 4.3.3 Jailbroken with redsn0w=-_-= iPhour 16gb Black 4.3.3 Jailbroken with jailbreakme.com=-_-= 3G 8gb 4.2.1 Jailbroken with Greenpois0n=-
0

#10
User is offline   SeksiBeefpile 
Posted 03 August 2010 - 01:18 PM

  • Donator
  • PipPipPipPipPipPipPip
  • Group: +Contributor
  • Posts: 487
  • Joined: 07-February 10

View PostDaiC1, on 03 August 2010 - 12:13 PM, said:

Is it "PDF Loading Warner" from BigBoss repo ?


Yes
-= If I helped you, thank me and click the (+)! =-_-= Proud xSellize VIP Donator =-_
-= iPhour 32gb Black 4.3.3 Jailbroken with redsn0w=-_-= iPhour 16gb Black 4.3.3 Jailbroken with jailbreakme.com=-_-= 3G 8gb 4.2.1 Jailbroken with Greenpois0n=-
0

#11
User is offline   DaiC1 
Posted 03 August 2010 - 01:54 PM

  • Donator
  • PipPipPipPipPip
  • Group: +Contributor
  • Posts: 69
  • Joined: 27-August 09

View PostSeksiBeefpile, on 03 August 2010 - 01:18 PM, said:

Ahh yes I have the same issue with world clock. I just saw a tweet from cdevwill saying that he didn't realize the clock was using PDFs.

Here is the tweet: Dammit, I did nor account for some legacy apps such as "clock" using PDFs for vector graphics. Grrr.


Yea just found this also any way to fix ?
If its not broken, fix it anyway!
0

#12
User is offline   x5c0d3 
Posted 03 August 2010 - 02:42 PM

  • I am Accesscode!
  • PipPipPipPipPipPipPip
  • Group: +Contributor
  • Posts: 230
  • Joined: 31-January 10
This is not a fix but a warner that pops up when you are about to open a pdf file. If you open a bad pdf file because you think it's okay you still can get owned.

This post has been edited by x5c0d3: 03 August 2010 - 02:47 PM

Share your knowledge.
0

#13
User is offline   mrmaff 
Posted 03 August 2010 - 02:49 PM

  • Donator
  • PipPip
  • Group: +Contributor
  • Posts: 14
  • Joined: 05-December 08
thanks for the feedback. hopefully a fix will be out soon
0

#14
User is offline   SeksiBeefpile 
Posted 03 August 2010 - 03:35 PM

  • Donator
  • PipPipPipPipPipPipPip
  • Group: +Contributor
  • Posts: 487
  • Joined: 07-February 10
I'm sure the "fix" will come from Apple considering stock (unjailbroken) phones are vulnerable. They're kind of obligated to fix this exploit.

This is not really a fix that any of us want because I'm sure they'll couple it with something that ruins JBs and ULs
-= If I helped you, thank me and click the (+)! =-_-= Proud xSellize VIP Donator =-_
-= iPhour 32gb Black 4.3.3 Jailbroken with redsn0w=-_-= iPhour 16gb Black 4.3.3 Jailbroken with jailbreakme.com=-_-= 3G 8gb 4.2.1 Jailbroken with Greenpois0n=-
0

#15
User is offline   StoneCut 
Posted 20 September 2010 - 05:24 AM

  • Senior Member
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 175
  • Joined: 20-January 09
I confirm I have the same issue with the Clock and PDF Exploit Warner :(
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Close  Member Login
Register new account Go to advanced login Log in with Facebook Log in with Twitter