Samsung E730 Phone Remote Denial of Service Vulnerability

Bugtraq ID:	16517
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2006 12:00AM
Updated:	Feb 06 2006 12:00AM
Credit:	Discovered by Pierre Betouin <[email protected]> using Bluetooh Stack Smasher (BSS).
Vulnerable:	Samsung E730 CellPhone 0
Not Vulnerable:

Samsung E730 Phone Remote Denial of Service Vulnerability


Samsung E730 is reportedly prone to a remote denial-of-service vulnerability.

A successful attack can allow an attacker to corrupt memory and to trigger a denial-of-service condition. Arbitrary code execution may be possible as well, but this has not been confirmed.

Samsung E730 is reported vulnerable to this issue; the specific firmware is currently unknown.

Samsung E730 Phone Remote Denial of Service Vulnerability

The BSS - Bluetooth Stack Smasher is reported to be able to trigger this vulnerability.

Samsung E730 Phone Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Samsung E730 Phone Remote Denial of Service Vulnerability

References:

• [ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer (Research Infratech)
  
• [Infratech - release] version 0.6 de Bluetooth Stack Smasher (Secuobs)
  
• Samsung Homepage (Samsung)