 |
"Bluesnarfing", which allows malicious users to connect to Bluetooth-enabled cellular phones and other devices without going through the pairing/authorization process, has become a larger problem, according to Daily Wireless. Several new phones have been found to have vulnerabilities in their Bluetooth software that allow malicious users to gain unauthorized access to a Bluetooth device and access a user's phonebook (including pictures, if any), calendar, realtime clock, and the IMEI number used to uniquely identify the phone. The IMEI number can be used to illegally "clone" a handset.
The Sony Ericsson T610 and Nokia 6310i have now been added to the vulnerable list, bringing the total number of known-affected devices up to five Sony Ericsson and five Nokia handsets. Some have other security problems as well, according to watchdog site BlueStumbler.
Until a fix is released from the manufacturer of the handset, the only recourse is to disable "Discoverable" mode on the affected handsets. BlueStumbler reports that there are known exploits that can work even then, however.
|
|
|
|
|
Archive