Info

Disclosure

Feb 10, 2004

Discovery

Nov 26, 2003

Dates

Exploit

Unknown

Solution

Unknown

Description

Nokia 6310i contains a flaw that may allow a remote denial of service. The issue is triggered when invalid Bluetooth OBEX messages are sent by an attacker, and will result in loss of availability for the phone.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Rumored
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Disable Bluetooth.

Products

Nokia

6310i Mobile Phone

All Versions

References

Security Tracker: 1014973
Secunia Advisory ID: 10827
Bugtraq ID: 14948 9603
ISS X-Force ID: 15107
CVE ID: 2004-0143 (see also: NVD) 2005-3093 (see also: NVD)
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0698.html
http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html
http://osvdb.org/ref/03/03890-mobibug-nokia.txt
Vendor URL: http://www.nokia.com/nokia/0,,133,00.html
Other Advisory URL: http://www.pentest.co.uk/documents/ptl-2004-01.html
Keyword: PTL-2004-01

Credit

Tim Hurman - tim.hurmanpentest.co.uk - Pentest Limited

Direct URL: http://osvdb.org/3890