Multiple mobile phones bluetooth DoS
Published:		24.01.2007
Source:		BUGTRAQ
SecurityVulns ID:		7092
Type:		remote
Level:		4/10
Description:		Flood with ussp-push messages causes user interface blocking by multiple download prompt messages.

Affected:		NOKIA : Nokia N70
		SONYERICSSON : Sony Ericsson K700i
		MOTOROLLA : MOTORAZR V3
		SONYERICSSON : Sony Ericsson W810i
		LG : Chocolate KG800
CVE:		CVE-2007-0524 (The LG Chocolate KG800 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.)
		CVE-2007-0523 (The Nokia N70 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.)
		CVE-2007-0522 (The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.)
		CVE-2007-0521 (The Sony Ericsson K700i and W810i phones allow remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push.)

Original document

Armin Hornung, Bluetooth DoS by obex push (24.01.2007)

Files:		Bluetooth DoS by obex push PoC
Discuss:		Read or add your comments to this news (0 comments)