Nokia 6210/3310/3330 Handset Malformed SMS User Data Header Denial Of Service Vulnerability
BID:12201
Info
Nokia 6210/3310/3330 Handset Malformed SMS User Data Header Denial Of Service Vulnerability
| Bugtraq ID: | 12201 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2001 12:00AM |
| Updated: | Nov 21 2001 12:00AM |
| Credit: | This issue was discovered by Job de Haas and presented at Black Hat Europe 2001. |
| Vulnerable: |
Nokia Nokia 6210 5.27 Nokia Nokia 6210 Nokia Nokia 3330 Nokia Nokia 3310 |
| Not Vulnerable: | |
Discussion
Nokia 6210/3310/3330 Handset Malformed SMS User Data Header Denial Of Service Vulnerability
The Nokia 6210/3310/3330 handsets are prone to denial of service attacks when receiving SMS (Short Message Service) messages that contain malformed User Data Headers (UDH).
This condition may allegedly persist as long as the SMS message remains in the user's inbox, rendering the handset useless until the message is removed from the inbox or another SIM card is used with the affected handset. Information from similar vulnerabilities related to malformed SMS messages indicate that the handset may be restored by disconnecting/reconnecting the battery and then rebooting the phone. It is not known if this measure is effective in restoring the phone to normal operating capacity once this vulnerability has been triggered, however, users should consider this measure when attempting to restore their handset.
It is not known if other Nokia handsets are affected, or if other vendors produce handsets that are similarly vulnerable.
The Nokia 6210/3310/3330 handsets are prone to denial of service attacks when receiving SMS (Short Message Service) messages that contain malformed User Data Headers (UDH).
This condition may allegedly persist as long as the SMS message remains in the user's inbox, rendering the handset useless until the message is removed from the inbox or another SIM card is used with the affected handset. Information from similar vulnerabilities related to malformed SMS messages indicate that the handset may be restored by disconnecting/reconnecting the battery and then rebooting the phone. It is not known if this measure is effective in restoring the phone to normal operating capacity once this vulnerability has been triggered, however, users should consider this measure when attempting to restore their handset.
It is not known if other Nokia handsets are affected, or if other vendors produce handsets that are similarly vulnerable.
Exploit / POC
Nokia 6210/3310/3330 Handset Malformed SMS User Data Header Denial Of Service Vulnerability
The researcher who discovered this vulnerability has successfully modified sms_client to exploit this vulnerability. The modified client is not publicly available or known to be circulating in the wild.
The researcher who discovered this vulnerability has successfully modified sms_client to exploit this vulnerability. The modified client is not publicly available or known to be circulating in the wild.
Solution / Fix
Nokia 6210/3310/3330 Handset Malformed SMS User Data Header Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Nokia 6210/3310/3330 Handset Malformed SMS User Data Header Denial Of Service Vulnerability
References:
References:
- How to crash a phone by SMS (The Register)
- Mobile Security: SMS and WAP (Job de Haas)