Siemens Mobile SMS Exceptional Character Vulnerability

Jan 15, 2002 - Summary. Siemens' Mobile phone supports SMS utilizing the PDU standard. There is a bug in the mobile phone's display subroutine;.
40KB taille 3 téléchargements 283 vues
SecuriTeam.com ™ (Siemens Mobile SMS Exceptional Character Vulnerability)

Page 1 de 2

Beyond-Security's SecuriTeam.com SecuriTeam Home About SecuriTeam Ask the Team Advertising info Security News Security Reviews Exploits Tools UNIX focus Windows NT focus

Title

15/1/2002

Siemens Mobile SMS Exceptional Character Vulnerability

Search

Summary 1. IndiaTimes.com - Email - Session hijacking and Inbox Blocking 2. Multiple Vulnerabilities in Stack Smashing Protection Technologies 3. csMailto.cgi - Remote Command Execution 4. Intel D845HV/WN/PT Series Motherboard Vulnerability 5. De-Anonymizer (SCRIPT Bypassing)

E-Mail this article to a friend Send us comments

Siemens' Mobile phone supports SMS utilizing the PDU standard. There is a bug in the mobile phone's display subroutine; whenever it tries to display special characters the mobile will shut down. In addition, since the SMS cannot be deleted without viewing it, thus it will remain on the phone without possibility of deleting it.

Details Vulnerable systems: Siemens 3568i (Or below) Exploit: http://www.benjurry.org/en/program/smsdos.zip Or, http://www.xfocus.org/download.php?id=10 Solution: Don't display SMS's you receive from strangers. If you receive such an SMS, you can delete it using the following computer program: http://www.benjurry.org/en/program/sms.zip Or, http://www.xfocus.org/download.php?id=11 Solution: SSMC (Siemens Shang Mobile Communication Ltd) say that the new software version 23 of 35 series (3508i,3518i & 3568i ) already resolved this vulnerability. Any one can update their software on the regional support center.

http://www.securiteam.com/securitynews/5IP0J1F60W.html

30/04/02

SecuriTeam.com ™ (Siemens Mobile SMS Exceptional Character Vulnerability)

Page 2 de 2

Any one can update their software on the regional support center.

Additional information The information has been provided by benjurry. Copyright © 1998-2001 Beyond Security Ltd. All rights reserved. Terms of Use Site Privacy Statement.

http://www.securiteam.com/securitynews/5IP0J1F60W.html

30/04/02