PT-2007-7229 · Nokia · Nokia N95

Published 2007-12-15 · Updated 2011-03-08 · CVE-2007-6371

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nokia N95 cell phone with RM-159 firmware version 12.0.013

Description The issue allows remote attackers to cause a denial of service, resulting in device inoperability. This can be achieved by sending a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session.

Recommendations For Nokia N95 cell phone with RM-159 firmware version 12.0.013, as a temporary workaround, consider disabling the SIP functionality until a patch is available. Restrict access to the device to minimize the risk of exploitation. Avoid using the SIP INVITE and CANCEL messages in different sessions until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-6371

Affected Products

Nokia N95

References · 4

• 🔥 http://securityfocus.com/bid/26726 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2007-December/058839.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6371 · Security Note
• http://vupen.com/english/advisories/2007/4113 · Note