QwikSec

Security Database

CVE

CWE

Training

CVE-2012-3887

Published: Jul 26, 2012

Modified: Sep 17, 2024

PUBLISHED

Description

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20120712 security advisory: AirDroid 1.0.4 beta

mailing-list

x_refsource_BUGTRAQ

http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.