|
Home Page >
Main Cellphones & Security
Page
2 May 2004
SecurityFocus has reported a flaw in the software of
the Siemens S55 phone that could enable messages to be sent from a handset
without the owners knowledge.
The Siemens S55 is affected by an SMS confirmation
message bypass vulnerability. This issue is due to a race condition error
that allows a malicious programmer to send SMS messages from unsuspecting
cellular telephone user's telephones while obscuring the confirmation
request.
This issue may allow a malicious programmer to develop
an application that can send SMS messages without the cellular telephone
user's knowledge.
No fix has been issued for this problem, and there
have not been any reports of anyone successfully exploiting this security
bug.
|
|
.gif){kind=spacer}