Nokia N95 Phone SIP Cancelled INVITE Message Remote Denial of Service Vulnerability

Bugtraq ID:	26726
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6371
Remote:	Yes
Local:	No
Published:	Dec 05 2007 12:00AM
Updated:	May 07 2015 05:34PM
Credit:	Humberto J. Abdelnur, Radu State, and Olivier Festor are credited with the discovery of this vulnerability.
Vulnerable:	Nokia N95 Phone 0
Not Vulnerable:

Nokia N95 Phone SIP Cancelled INVITE Message Remote Denial of Service Vulnerability

Nokia N95 phones are prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages.

Exploiting this issue allows remote attackers to cause the device to fail to respond to further call requests until it is restarted, denying service to legitimate users.

This issue affects Nokia N95 RM-159 V 12.0.013 phones; other versions may also be affected.

Nokia N95 Phone SIP Cancelled INVITE Message Remote Denial of Service Vulnerability

To exploit this issue, attackers may use readily available network utilities.

The following exploit code is available:

• /data/vulnerabilities/exploits/26726.pl

Nokia N95 Phone SIP Cancelled INVITE Message Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nokia N95 Phone SIP Cancelled INVITE Message Remote Denial of Service Vulnerability

References:

• [Full-disclosure] Nokia N95 cellphone remote DoS using the SIP Stack (Radu State)
  
• Nokia N95 Product Page (Nokia)