Nokia 3210 And 7610 Remote OBEX Denial Of Service Vulnerability

Bugtraq ID:	14948
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 26 2005 12:00AM
Updated:	Sep 26 2005 12:00AM
Credit:	Alejandro Ramos <[email protected]> discovered this vulnerability.
Vulnerable:	Nokia 7610 Nokia 3210
Not Vulnerable:

Nokia 3210 And 7610 Remote OBEX Denial Of Service Vulnerability

A remote denial of service vulnerability affects Nokia 3210 and 7610 phones. This issue is due to a failure of the operating system to handle certain filename characters in Bluetooth OBEX transfers.

An attacker may leverage this issue to cause affected Nokia devices to fail to respond to further Bluetooth OBEX communications. Further communication likely fails until the affected phone is restarted.

Due to code reuse among devices, other phones may also be affected.

Nokia 3210 And 7610 Remote OBEX Denial Of Service Vulnerability

An exploit is not required.

Nokia 3210 And 7610 Remote OBEX Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nokia 3210 And 7610 Remote OBEX Denial Of Service Vulnerability

References:

• Nokia 3210 Product Page (Nokia)
  
• Nokia 7610 Product Page (Nokia)
  
• Nokia 7610, 3210 denial of service in OBEX. ("A. Ramos" )