Multiple Samsung Devices SMS Provisioning Messages Authentication Bypass Vulnerability

Bugtraq ID:	34705
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 23 2009 12:00AM
Updated:	Apr 27 2009 01:26PM
Credit:	Mobile Security Lab
Vulnerable:	Samsung SGH-J750 0 Samsung M8800 Innov8 0
Not Vulnerable:

Multiple Samsung Devices SMS Provisioning Messages Authentication Bypass Vulnerability

Multiple Samsung devices are prone to an authentication-bypass vulnerability.

Attackers can exploit this vulnerability to modify a device's configuration and to carry out other attacks.

Samsung M8800 Innov8 and Samsung SGH-J750 are affected.

Multiple Samsung Devices SMS Provisioning Messages Authentication Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Samsung Devices SMS Provisioning Messages Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Samsung Devices SMS Provisioning Messages Authentication Bypass Vulnerability

References:

• Samsung Homepage (Samsung)
  
• Samsung Missing Provisioning Authentication (Mobile Security Lab)
  
• MSL-2009-001 - Samsung Missing Provisioning Authentication (Mobile Security Lab )