WHID 2005-5: Paris Hilton's T-Mobile online account hacked

[View]

Attack Information

WHID ID:

2005-5

Date Occured:

11 Jul 2005

Attack Method:

Insufficient Authentication

Attack Method:

Weak Password Recovery Validation

Attack Method:

OS Commanding

Details remain sketchy, but news reports include social engineering, a guessable secret question for password recovery, and a known vulnerability is BEA WebLogic

Additional information:

Paris Hilton Hack Started With Old-Fashioned Con [Washington Post, May 19 2005]
Paris Hilton: Victim of T-Mobile's Web Flaws? [PCWorld, Mar 1 2005]
Known Hole Aided T-Mobile Breach [Wired.com, Feb 28 2005]
How Paris Got Hacked? [O'Reilly Network, Feb 22 2005]

Add new comment

Latest Stories

WAFs are not perfect, but is any security tool perfect? (Feb 9th 2010)
Forrester estimates the WAF market to be $220M in 2010 (Feb 9th 2010)
ModSecurity exceptions for TYPO3 (Jan 20th 2010)
Presentation about WAFs in the cloud (Jan 15th 2010)
The curse of PCI for WAFs (Jan 11th 2010)
A New Year, a New Acronym (Jan 10th 2010)
A Remote Command Injection Vulnerability Applicure's dotDefender Site Management. (Dec 10th 2009)

Navigation

Subscribe:

Xiom is the place to find information about Web Application Firewalls (WAFs) including reviews, analysis, announcements and research. Tune to the RSS channel to get every bit of information or subscribe to the newsletter to receive only in depth articles.

Xiom also leasd and hosts the Web Hacking Incidents Database, a Web Application Security Consortium project aimed at maintaining a list of web applications related security incidents.

Xiom is a community web site lead by Ofer Shezaf.

WHID

The Web Hacking Incident Database

WHID 2005-5: Paris Hilton's T-Mobile online account hacked

The Web Hacking Incidents Database

WAF Resources

Latest Stories

Navigation