BSA200201 --------------------------------------------------------------------------- Siemens Mobie SMS Exceptional Character Vulnerability --------------------------------------------------------------------------- Release Date: 2002-01-13 Author: benjurry(benjurry@xfocus.org) Homepage: www.benjurry.org www.xfocus.org Affected system: Siemens 3568i(Or below) Not affected system: Siemes 6688 Description: Siemens Mobie transfer SMS by PDU fromat.There is a bug in displaying exceptional character, the mobie will be shutdown, and the SMS can't be delete.So anyone can DOS the mobie's SMS by sending lot of this type SMS. Exploit: http://www.benjurry.org/en/program/smsdos.zip http://www.xfocus.org/download.php?id=10 Solution: Don't diplay the SMS sending by stranger.If you receive this sms ,you can delete it by computer's program. ABOUT XFOCUS Xfocus is a non-profit and free technology organization which was founded in 1998 in China. We are devoting to research and demonstration of weaknesses related to network services and communication security. Copyright 2001 http://xfocus.org, All rights reserved.
