CVE-2008-3553

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2008-3553.

CVE-2008-3553: Undefined Security Weakness

Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka "ISSUES 3-10." NOTE: as of 20080807, the only disclosure is a vague...

CVE-2008-3552: Undefined Security Weakness

Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka "ISSUES 11-15." NOTE: as of 20080807, the only...

Nokia series 40 phones multiple security vulnerabilities

Multiple J2ME implementation vulnerabilities allow complete device compromization...

[SE-2008-01] J2ME Security Vulnerabilities 2008

Dear Bugtraq, The following information might be of interest for the readers of this list. Security Explorations http://www.security-explorations.com, a new security research start-up company from Poland discovered two very serious security vulnerabilities in mobile Java technology 1 coming from...

Nokia Symbian 60 (Bluetooth Nickname) Remote Restart (update)

No description provided by source. / Nokia Bluetab Exploit Found & coded by Qnix - This Exploit will creat file called bluetab.txt with your bluetooth nickname, send the file to your nokia mobile open it copy the nickname and paste it to your bluetooth...

Session fixation

Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service device inoperability via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session...

CVE-2007-6371

Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service device inoperability via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session...

CVE-2007-6371

CVE-2007-6371 affects Nokia N95 with RM-159 firmware 12.0.013. A remote attacker can cause a denial of service by sending a SIP INVITE, followed by an immediate SIP CANCEL, then a second SIP INVITE in a different session. The connected documents do not specify a fix or patch version. No exploitat...

CVE-2007-6371

Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service device inoperability via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session...

CVE-2007-6371: Improper Input Validation

Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service device inoperability via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session...

Nokia N95电话SIP取消INVITE消息远程拒绝服务漏洞

Nokia N95是一款流行的电话设备。 Nokia N95包含的SIP电话客户端处理SIP消息存在问题，远程攻击者可以利用漏洞对设备进行拒绝服务攻击。 提交特殊的SIP消息序列可导致设备进入不稳定状态。消息序列包含两个不同的SIP对话框，如果第一个初始化INVITE事务而立即关闭，那么第二个事务初始化一个普通的INVITE事务可导致触发此漏洞。设备需要重新启动获得正常功能。 Nokia N95 Phone 目前没有解决方案提供： http://www.nseries.com/products/n95/ perl nokiav12.pl dstIP username SourceIp...

[Full-disclosure] Nokia N95 cellphone remote DoS using the SIP Stack

Nokia N95 cellphone remote DoS using the SIP Stack Severity: High – Denial of Service Hardware: Nokia N95 Firmware: Tested version: Nokia RM-159 V 12.0.013 Notification: Vulnerability found: 11 September 2007 Contact Nokia Support: 12 September 2007 / None reply Contact Nokia Security Support: 19...

Cisco 7940 / Nokia N95 phones DoS

Race conditions on SIP protocol handling...

nokia-dos.txt

Nokia N95 cellphone remote DoS using the SIP Stack Severity: High – Denial of Service Hardware: Nokia N95 Firmware: Tested version: Nokia RM-159 V 12.0.013 Notification: Vulnerability found: 11 September 2007 Contact Nokia Support: 12 September 2007 / None reply Contact Nokia Security Support: 19...

openSUSE 10 Security Update : kernel (kernel-4487)

This kernel update fixes the following security problems : - CVE-2007-3105: Stack-based buffer overflow in the random number generator RNG implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up...

Unfixed XSS vulnerability at www.free-nokia-ringtones.uk.com

Security researcher Yachi, has submitted on 06/10/2007 a cross-site-scripting XSS vulnerability affecting www.free-nokia-ringtones.uk.com, which at the time of submission ranked 217949 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/10/2007...

Information disclosure

Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to 1 usrmgr/userList.asp or 2...

Deserialization of untrusted data

usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service account deactivation via the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the 1 username...