Nokia N70 Remote Denial of Service Vulnerability

Bugtraq ID:	16513
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2006 12:00AM
Updated:	Feb 06 2006 12:00AM
Credit:	Discovered by Pierre Betouin <[email protected]> using Bluetooh Stack Smasher (BSS).
Vulnerable:	Nokia N70 0
Not Vulnerable:

Nokia N70 Remote Denial of Service Vulnerability


Nokia N70 is reportedly prone to a remote denial-of-service vulnerability.

A successful attack can allow an attacker to corrupt memory and to trigger a denial-of-service condition. Arbitrary code execution may be possible as well, but this has not been confirmed.

Nokia model N70 is reported vulnerable to this issue; the specific firmware is currently unknown.

Nokia N70 Remote Denial of Service Vulnerability


The BSS - Bluetooth Stack Smasher is reported to be able to trigger this vulnerability.

Nokia N70 Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Nokia N70 Remote Denial of Service Vulnerability

References:

• [ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer (Research Infratech)
  
• [Infratech - release] version 0.6 de Bluetooth Stack Smasher (Secuobs)
  
• Nokia Nseries (Nokia)