Difference between revisions of "Pwnage 2.0"

From The iPhone Wiki
Jump to: navigation, search
m
Line 1: Line 1:
This exploit in the [[VROM]] is really the ultimate exploit, since it allows unsigned code to be run at the lowest level. It cannot be patched out.
+
This exploit in the [[VROM]] is really the ultimate exploit, since it allows unsigned code to be run at the lowest level. It can be patched out '''only''' by a new hardware revision.
   
 
==Credit==
 
==Credit==
Line 9: Line 9:
 
==Implementations==
 
==Implementations==
 
*[http://lpahome.com/geohot/iran.rar iran]
 
*[http://lpahome.com/geohot/iran.rar iran]
*[[PwnageTool]](although it doesn't actually run the DFU, iTunes does)
+
*[[PwnageTool]] (although it doesn't actually run the DFU, iTunes does)
   
 
[[Category:Jailbreaks]]
 
[[Category:Jailbreaks]]

Revision as of 06:48, 4 August 2008

This exploit in the VROM is really the ultimate exploit, since it allows unsigned code to be run at the lowest level. It can be patched out only by a new hardware revision.

Credit

The dev team

Exploit

There is a bug in the certificate parsing. By passing a malformed certificate, unsigned code can be run.

Implementations

  • iran
  • PwnageTool (although it doesn't actually run the DFU, iTunes does)