Nokia SGSN DX200 Remote SNMP Information Disclosure Vulnerability

Bugtraq ID:	7081
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 13 2003 12:00AM
Updated:	Mar 13 2003 12:00AM
Credit:	Discovery credited to Ollie Whitehouse.
Vulnerable:	Nokia DX200 (SGSN)
Not Vulnerable:

Nokia SGSN DX200 Remote SNMP Information Disclosure Vulnerability

It has been reported that some models of the SGSN made by Nokia do not properly handle remote requests for information. Vulnerable devices may disclose sensitive information which could enable an attacker may be able to mount further attacks on network resources.

Nokia SGSN DX200 Remote SNMP Information Disclosure Vulnerability

This issue may be exploited with an SNMP client.

The following proof of concept was made available by Ollie Whitehouse <[email protected]>:

snmpwalk <IP of SGSN> tellmeyoursecrets

Nokia SGSN DX200 Remote SNMP Information Disclosure Vulnerability

Solution:
It has been reported that Nokia has stated that future releases will exclude SNMP interface functionality.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nokia SGSN DX200 Remote SNMP Information Disclosure Vulnerability

References:

• Nokia Serving GPRS Support Node (SGSN) (Nokia)
  
• Nokia SGSN (DX200 Based Network Element) SNMP issue ("@stake Advisories" )