PT-2007-7229 · Nokia · Nokia N95

Publicado 2007-12-15 · Atualizado 2011-03-08 · CVE-2007-6371

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nokia N95 cell phone with RM-159 firmware version 12.0.013

Description The issue allows remote attackers to cause a denial of service, resulting in device inoperability. This can be achieved by sending a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session.

Recommendations For Nokia N95 cell phone with RM-159 firmware version 12.0.013, as a temporary workaround, consider disabling the SIP functionality until a patch is available. Restrict access to the device to minimize the risk of exploitation. Avoid using the SIP INVITE and CANCEL messages in different sessions until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-6371

Produtos afetados

Nokia N95

Referências · 4

• 🔥 http://securityfocus.com/bid/26726 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058839.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6371 · Nota de Segurança
• http://vupen.com/english/advisories/2007/4113 · Nota