Nokia N95 SIP Message Processing Denial of Service Weakness

ERCOLINO

Membro dello Staff
Amministratore
Registrato
3 Marzo 2003
Messaggi
251.061
Località
Torino
Secunia Advisory: SA27945
Release Date: 2007-12-06

Critical: Not critical
Impact: DoS
Where: From remote
Solution Status: Unpatched

OS: Nokia N95 12.x

This advisory is currently marked as unpatched!



Description:
Humberto J. Abdelnur, Radu State, and Olivier Festor have reported a weakness in Nokia N95, which can be exploited by malicious people to cause a DoS (Denial of Service).

The weakness is caused due to an error in processing SIP messages and can be exploited to cause the phone to become unresponsive via a specially crafted sequence of SIP messages.

Successful exploitation requires that the SIP client is enabled.

The weakness is reported in a Nokia N95 with firmware version 12.0.013. Other phones and versions may also be affected.

Solution:
Disable the SIP client.



Bollettino Secunia
 
Fammi capire: bisogna disabilitare i client SIP dell'N95, cioè, sostanzialmente, rinunciare alle sue funzioni VOIP?...:5eek:
 
C'è scritto sopra cosa bisogna fare.

Comunque è classificato come livello più basso di pericolosità (Non critico)
 
Indietro
Alto Basso