Nokia GGSN DoS

IP packet with invalid options causes device to crash...

Nokia GGSN (IP650 Based) DoS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake Inc. www.atstake.com Security Advisory Advisory Name: Nokia GGSN IP650 Based DoS Release Date: 06/09/2003 Application: Nokia GGSN IP650 Based Platform: Nokia GGSN IP650 Based Severity: An attacker is able to cause GGSN to kernel panic Authors:...

Nokia IPSO 3.4.x - Voyager ReadFile.TCL Remote File Reading

Nokia IPSO 3.4.x - Voyager ReadFile.TCL Remote File Reading source: https://www.securityfocus.com/bid/7426/info It has been reported that Nokia IPSO does not properly handle some types of requests through Voyager. Because of this, an attacker with access to the interface may be able to view...

Nokia IPSO directory traversal

Directory traversal in /cgi-bin/readfile.tcl accessible via Web-Interface...

Nokia IPSO Voyager WebGUI readfile.tcl file Parameter Arbitrary File Access

The remote host includes a CGI /cgi-bin/readfile.tcl which allows anyone to read arbitrary files on the remote host with the privileges of the HTTP daemon typically 'nobody'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From: Jonas Eriksson mailto:[email protected] Date: 23/04/2003 To:...

Nokia IPSO Vulnerability

There is a remote security vulnerability in the Nokia IPSO operating system. Anyone with access to the webgui Voyager on the Nokia IP-box can read any file on the system. For example, login as the user 'monitor' disabled by default and use the readfile.tcl to read any file:...

Nokia IPSO 3.4.x - Voyager ReadFile.TCL Remote File Reading

source: https://www.securityfocus.com/bid/7426/info It has been reported that Nokia IPSO does not properly handle some types of requests through Voyager. Because of this, an attacker with access to the interface may be able to view potentially sensitive information...

CVE-2003-0137

SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node SGSN allows remote attackers to read SNMP options via arbitrary community strings...

CVE-2003-0137

The CVE affects the SNMP daemon in the DX200-based Nokia SGSN network element. It allows remote attackers to read SNMP options by using arbitrary community strings, enabling partial information disclosure. No remediation details are provided in the supplied documents. Exploitation status or in-th...

Nokia SGSN (DX200 Based Network Element) SNMP issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia SGSN DX200 Based Network Element SNMP issue Release Date: 03/13/2003 Application: Nokia SGSN DX200 Based Network Element Platform: DX200 Severity: An attacker is able to read SNMP...

Nokia SGSN SNMP information leak

SNMP read access is possible with any community name...

Nokia SGSN DX200 - Remote SNMP Information Disclosure

Nokia SGSN DX200 - Remote SNMP Information Disclosure source: https://www.securityfocus.com/bid/7081/info It has been reported that some models of the SGSN made by Nokia do not properly handle remote requests for information. Vulnerable devices may disclose sensitive information which could enabl...

Nokia SGSN DX200 - Remote SNMP Information Disclosure

source: https://www.securityfocus.com/bid/7081/info It has been reported that some models of the SGSN made by Nokia do not properly handle remote requests for information. Vulnerable devices may disclose sensitive information which could enable an attacker may be able to mount further attacks on...

CVE-2003-0103

Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service crash, lockup, or restart via a Multi-Part vCard with fields containing a large number of format string specifiers...

CVE-2002-0480

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...

CVE-2002-0480

Technical details about CVE-2002-0480 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-0480

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...

CVE-2002-0480: Undefined Security Weakness

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers ...

NMRC Advisory - KeyManager Issue in ISS RealSecure on Nokia Appliances

I N F O R M A T I O N A N A R C H Y 2 K 0 2 www.nmrc.org/InfoAnarchy Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org hellNBak [email protected] 19March2002 Platforms : Nokia Appliances Application : RealSecure Network Intrusion Detection NIDS Version 6.0 Severity : Medium Synopsis...

PalmOS crashes receiving SMS images using Handspring VisorPhone

Hello, A friend and I were playing around sending SMS messages the other day between a Nokia 3390 and his Handspring VisorPhone/Visor Prism combo. Sending text messages seemed to work just fine. However, on the Nokia, there is an option of sending SMS images. Apparently, they are fairly large as...