Bugtraq mailing list archives
Re: Siemens *35 and 45 series phones SMS Danial of Service
From: Timothy Farrell <xfarrell () ddisp net>
Date: Thu, 6 Mar 2003 07:20:53 -0500
This appears to work on the S46 (GSM) phone also. However, just like the S45, pressing and holding the "hang up" button appears to remedy the problem. Timothy F. Farrell Web Admin. www.TamaquaFire.com On Sunday 02 March 2003 20:06, subj subj wrote:
Information: The name of vulnerability: Siemens *35-45 DoS SMS Lag To vulnerability are subject: All versions siemens *35 and *45. Official site: www.siemens-mobile.com Kind of vulnerability: Refusal in Service (Denial of Service). Type of vulnerability: Removed / local. Author: subj (r2subj3ct () dwcgr0up com) Date: 02.03.2003 Site: www.dwcgr0up.com Description of vulnerability: There is a local and remote vulnerability and Siemens *35 and *45 series phones. A message of the form "%String", where String is on of the languages from the phone language selection menu, will completely disable *35 series phones and result in a 2 minute read delay on *45 series phones. Note that the first letter of language should be capitalized and the quotation marks should be present in the message. The phone will try to read the message and then after 2 minutes return to the main menu. This happens every time the message is sent. After 10-15 messages the battery (NiMH) gets empty. There is a local vulnerability of the same kind. A message of the form "%some_word", where some_word is any lower case letter sequence will result in the same effects described above. Vulnerability exploiting: (for remote): We send on "phone - victim" the message: "%Deutsch" Or "%Polski" "%Magyar" "%English" "%Deutsch" (for local): "testedersecurity" Thanks: DHG, GipsHack, Netp0is0n, de1irium, r00tc0de, f0kp l0bster, r4ShRaY, D4rkGr3y, Moby, Orb, Foster, Owned, prior, dron (Ivanov Andrey)
Current thread:
- Siemens *35 and 45 series phones SMS Danial of Service subj subj (Mar 03)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Jan Niehusmann (Mar 03)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Andreas Hofmeister (Mar 04)
- Re[2]: Siemens *35 and 45 series phones SMS Danial of Service João Colaço (Mar 04)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Robert Waldner (Mar 04)
- RE: Siemens *35 and 45 series phones SMS Danial of Service Dawid Szymański (Mar 05)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Andreas Hofmeister (Mar 04)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Christian "cycloon" Gut (Mar 05)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Lukasz Wojcik (Mar 06)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Timothy Farrell (Mar 06)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Luciano Miguel Ferreira Rocha (Mar 06)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Raymond A. Meijer (Mar 06)
- <Possible follow-ups>
- RE: Siemens *35 and 45 series phones SMS Danial of Service Willis Johnson (Mar 04)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Michael Landsmann (Mar 06)
- Re[2]: Siemens *35 and 45 series phones SMS Danial of Service Matti Haack (Mar 07)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Michael Landsmann (Mar 06)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Mark Schellhase (Mar 07)
- Re: Siemens *35 and 45 series phones SMS Danial of Service kornau (Mar 08)
- Re: Siemens *35 and 45 series phones SMS Danial of Service Jan Niehusmann (Mar 03)