Re: Bluetooth SIG Denial of Service vulnerability

[Joshua Davis]

I should let it be known that I've tried to post a program I've creted
on bugtraq for some time now,. My program (TBEAR), includes a DoS tool
that does this same thing. It is located at http://www.transient-iss.com.
My requests to post this have been ignored multiple times, so I ended up
just throwing it up on freshmeat.


----
Joshua Davis
Transient Infrastructure Security Solutions


/"\
\ / ASCII Ribbon Campaign
X against HTML email & vCards
/ \

[next@securityfocus.com, at@securityfocus.com,]

I just checked it out with my Nokia 6310i, firmware 5.51 (an old firmware, I know).

a) if the phone is not paired with the BT dongle I used, it asks for pairing

b) even though the screen shows "connecting" with the moving bar, I can use one of the blue buttons to cancel this screen a do something else. l2ping reports no losses why I can use the phone normally. (browsed through menu, read messages).


All in all, no harm done.