OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: benjurry263.net
Date: Sun Jan 13 2002 - 20:25:38 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    BSA200201


    ---------------------------------------------------------------------------
    Siemens Mobie SMS Exceptional Character Vulnerability
    ---------------------------------------------------------------------------


    Release Date:

    2002-01-13

    Author:

    benjurry(benjurryxfocus.org)

    Homepage:

    www.benjurry.org www.xfocus.org

    Affected system:


    Siemens 3568i(Or below)

    Not affected system:

    Siemes 6688

    Description:

    Siemens Mobie transfer SMS by PDU fromat.There is a bug in displaying exceptional character, the mobie will be shutdown,

    and the SMS can't be delete.So anyone can DOS the mobie's SMS by sending lot of this type SMS.

    Exploit:

    http://www.benjurry.org/en/program/smsdos.zip

    http://www.xfocus.org/download.php?id=10

    Solution:

    Don't diplay the SMS sending by stranger.If you receive this sms ,you can delete it by computer's program.


    ABOUT XFOCUS
    Xfocus is a non-profit and free technology organization which was founded in 1998 in China. We are devoting to research and demonstration of weaknesses related to network services and communication security.

    Copyright 2001 http://xfocus.org, All rights reserved.