Nokia 6131存在多个漏洞

BUGTRAQ ID: 30716 CNCAN ID：CNCAN-2008081804 Nokia 6131是一款支持近距离通信NFC的手机设备。 Nokia 6131设备存在URL欺骗和拒绝服务攻击，远程攻击者可以利用漏洞使设备崩溃，造成拒绝服务攻击。 当显示NDEF Smart Poster和明文URI标签的内容时存在URI/URL欺骗，当装载WEB页时浏览器不正确显示完全的主机名。 NDEF记录解析器在处理包含0xFFFFFFFF或0xFFFFFFFE的记录负载长度字段时会导致崩溃。 当电话号码超过124个字符时，SMS和TEL URI处理器会崩溃。 Nokia 6131...

nokia-spoof.txt

Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6131 NFC Firmware: V 05.12, 19-09-07, RM-216 Device Type: mobile phone OS: Symbian Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URI/URL Spoofing when...

Nokia 6131 NFC URI/URL Spoofing and DoS Advisory

Vulnerability Report --- BEGIN ADVISORY --- Manufacturer: Nokia www.nokia.com Device: Nokia 6131 NFC Firmware: V 05.12, 19-09-07, RM-216 Device Type: mobile phone OS: Symbian Series40 Subsystem: Near Field Communication ----------------------------- Executive Summary: URI/URL Spoofing when...

CVE-2007-2282

Cisco Network Services CNS NetFlow Collection Engine NFC before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system...

CVE-2007-2282

Cisco NetFlow Collection Engine (NFC) before version 6.0 is affected by a default credentials issue: the nfcuser account uses a default password, allowing remote attackers to modify NFC configuration and, on Linux, gain login access to the host OS. This is due to default accounts in NFC prior to ...