EUVD-2012-5737

Malware in sbrugna...

CVE-2012-5859

Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service crash via a crafted request to www/apps/KiesAir/jws/ssd.php...

CVE-2012-5858

Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address...

Authentication flaw

Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address...

Design/Logic Flaw

Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service crash via a crafted request to www/apps/KiesAir/jws/ssd.php...

EUVD-2012-5736

Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address...

CVE-2012-5858

Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address...

CVE-2012-5859

Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service crash via a crafted request to www/apps/KiesAir/jws/ssd.php...

CVE-2012-5858

CVE-2012-5858 affects Samsung Kies Air (versions 2.1.207051 and 2.1.210161). The vulnerability stems from IP-based authentication, enabling remote attackers to spoof the IP and perform MITM to read phone contents. Public details in connected sources confirm an authorization bypass/DoS scenario ti...

CVE-2012-5859

Samsung Kies Air (Android) versions 2.1.207051 and 2.1.210161 are affected by CVE-2012-5859, which allows remote attackers to cause a denial of service (crash) by sending a crafted request to /www/apps/KiesAir/jws/ssd.php. The issue, described as a DoS via a crafted HTTP request, is tied to Kies ...

PT-2012-6154

Name of the Vulnerable Software and Affected Versions Samsung Kies Air versions 2.1.207051 through 2.1.210161 Description The issue allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address, as the software relies on the IP address for...

PT-2012-6155

Name of the Vulnerable Software and Affected Versions Samsung Kies Air versions 2.1.207051 through 2.1.210161 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, via a crafted request to the "www/apps/KiesAir/jws/ssd.php" endpoint. Recommendations For...

CVE-2012-5858: Improper Authentication

Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address...

CVE-2012-5859: Undefined Security Weakness

Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service crash via a crafted request to www/apps/KiesAir/jws/ssd.php...

Samsung Kies Air security vulnerabilities

DoS, authentication bypass...

[CVE-2012-5858] [CVE-2012-5859] DoS/Authorization Bypass - Kies Air

Name: CVE-2012-5858 CVE-2012-5859 DoS/Authorization Bypass - Kies Air Package: com.samsung.swift.app.kiesair Affected versions: 2.1.207051, 2.1.210161 Testing Device: Samsung S3 AT&T - SAMSUNG-SGH-I747 Android Version: 4.0.4/ Build Number: IMM76D.I747UCALH9 Vendor homepage:...

Kies Air Denial Of Service / Authorization Bypass

Name: CVE-2012-5858 CVE-2012-5859 DoS/Authorization Bypass - Kies Air Package: com.samsung.swift.app.kiesair Affected versions: 2.1.207051, 2.1.210161 Testing Device: Samsung S3 AT&T - SAMSUNG-SGH-I747 Android Version: 4.0.4/ Build Number: IMM76D.I747UCALH9 Vendor homepage:...