[t3st.s3t]

i was messing around with spoofing to npa 512, when i accidentally discovered an insecurity with sprint pcs voicemail systems in the 512-587-xxxx area. if you spoof the number that you are calling to the number you not only get access to their voicemail system, but you can make calls from their phone. i tried this to random numbers within 512-587-xxxx and was successful every time, except if the number was disconnected. does anyone else have any knowledge about this sprint pcs insecurity with any other npa's?

edit....i'm now not sure if 512-587-xxxx is sprint pcs, sprint residential, or a mixture of both.

This post has been edited by t3st.s3t: 19 August 2006 - 10:03 PM

[JmanA9]

Sprint lets you place calls through the voicemail system?

[t3st.s3t]

JmanA9, on Aug 19 2006, 10:14 PM, said:

Sprint lets you place calls through the voicemail system?

yes. it gives you the option to press eight in the voicemail system to make a call. if you press eight during playback of a voicemail, the system will ask you if you want to call the number that has left the voicemail. i'm assuming that this particular npa and nxx belong to sprint, as bellsmind.net says that they do. it may be pcs or it may be sprint's residential systems. i stand corrected if it is not pcs.

[Strom Carlson]

t3st.s3t, on Aug 19 2006, 05:13 PM, said:

edit....i'm now not sure if 512-587-xxxx is sprint pcs, sprint residential, or a mixture of both.

 TX	   512	   587	   AS	   6664	   SPRINT SPECTRUM L.P.	   AUSTIN	   AUSUTXZMCM0			   04/24/2001

Sprint PCS :)

[decoder]

Many people thought that this vulnerability had been rectified, but as many people know, shit works different in different areas. What is dead here may still work there. Sprint needs to get on the fucking ball.

[t3st.s3t]

i agree that they need to fix this system. the ability to call out from voicemail is just ludicrous, let alone the ability to check the voicemail without a password. i never knew that sprint pcs had this voicemail insecurity. also, i found it out by pure accident. -_-

This post has been edited by t3st.s3t: 20 August 2006 - 07:47 PM

[Majest|c]

They fixed the problem here in Detroit, well to a degree. The Spoofing still works if the person has Skip Passcode on ... T Mobile claims they solved thier VMB problem, but all they did was add a few prompts and that was that. I am pretty sure all Cellular Carriers have some vulnerability available, but it gets harder to find them all because they change thier prompts, and procedures all the time. I am sure if people look, they will find them.

[TelcoBob]

your also able to call out from verizon wireless vmb's in the 919 area, never messed with one outside of the 919 area so i'm not sure if its a universal thing.

[ic0n]

Here in the cleveland area your still able to place calls from the 'vmb'. Radio shack in my area have demo phones that you can place calls on. They have everything on default so you can spoof and get dropped into the voicemail and dial out from within the box. Altho you don't get the CPN/ANI from that phone number it's a masked number that will give you a error when calling. But yes sprint needs to get there act together..