Vulnerability analysis of MMS user agents

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 77-86

  Mulliner, Collin ^a   Vigna, Giovanni ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Fuzzing; Mobile devices; Mobile phones; Multimedia messaging service; Vulnerability analysis

Indexed keywords

AUDIO RECORDINGS; COMPUTER CRIME; INFORMATION RETRIEVAL; MOBILE PHONES; VIDEO RECORDING;

FUZZING; MULTIMEDIA MESSAGING SERVICE; VIRTUAL INFRASTRUCTURE; VULNERABILITY ANALYSIS;

MESSAGE PASSING;

EID: 39049086351     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.55     Document Type: Conference Paper

References (22)

1. Apache Software Foundation. Apache HTTP Server. http://httpd.apache.org.
2. ArcSoft. MMS Composer, http: //www.arcsoft. com, 2002.
3. B. Jurry XFocus Team. Siemens Mobile SMS Exceptional Character Vulnerability, http://www.xfocus.org/ advisories/200201/2.html, January 2002.
4. D. Aitel Immunity Inc. SPIKE The Advantages of BlockBased Protocol Analysis for Security Testing, http: // immunity.com, 2003.
5. F-Secure. F-Secure Virus Descriptions : Commwarrior.A. http: //www. f-se cure . com/v-descs/ commwarrior. shtml, 2005.
6. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee. Hypertext transfer protocol HTTP/1.1, 1999.
7. i-mate. i-mate PDA2k. http://imate.com/ t-DETAILSP-DA2K.aspx.
8. J. de Haas. Mobile Security: SMS and a little WAP. http : //www.itsx.com/hal2001/hal2001-itsx.ppt, August 2001.
9. M. Laakso, M. Varpiola. Vulnerabilities Go Mobile. May 2002.
10. O. Whitehouse @stack Inc. FuzzServer. http:// www.blackops.cn/tools/ FuzzerServer.zip, January 2002.
11. O. Whitehouse @stack Inc. Nokia Phones Vulnerable to DoS Attacks, http://www.infoworld.com/ article/03/02/26/HNnokiados-l.html, February 2003.
12. OuIu University Secure Programming Group. PROTOS Security Testing of Protocol Implementations, http: //www.ee.oulu.fi/research/ouspg/protos/, 2002.
13. P. Oehlert. Violating Assumptions with Fuzzing. IEEE Security and Privacy, April 2005.
14. S. Hellkvist. MMSLib. http://www.hellkvist. org/software/#MMSLIB,2004.
15. The Kannel Group. Kannel: Open Source WAP and SMS Gateway, http://www.kannel.org.
16. P. M. W. Enck, P. Traynor and T. L. Porta. Exploiting Open Functionality in SMS-Capable Cellular Networks. In Conference on Computer and Communications Security, 2005.
17. W3C. Synchronized Multimedia Integration Language (SMIL 2.1). http://www.w3.org/TR/2005/ REC-SMIL2-20051213/, December 2005.
18. WAP Forum. Wireless Application Protocol Wireless Markup Language Specification. http://www. wapforum.org.
19. WAP Forum. WAP-210-WSP Wireless Application Protocol Architecture Specification, http://www.wapforum. com, 2000.
20. WAP Forum. WAP-206-WSP Wireless Application Protocol Multimedia Messaging Service Client Transactions Specification, http://www.wapforum.com, 2001.
21. WAP Forum. WAP-230-WSP Wireless Application Protocol Wireless Session Protocol Specification, http://www. wapforum. com, 2001.
22. WAP Forum. WAP-209-WSP Wireless Application Protocol MMS Encapsulation Protocol. http://www. wapforum.com, 2002.