Memory corruption

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field th...

CVE-2008-2374

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field th...

CVE-2008-2374

CVE-2008-2374 affects BlueZ components: bluez-libs (versions 3.30 and older) and bluez-utils (older than 3.34). The issue is an input/length validation flaw in the SDP packet parser, allowing a remote SDP server to cause a denial of service and potentially other impact through crafted length fiel...

CVE-2008-2374

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to cause a denial of service or possibly have unspecified other impact via a crafted length field th...

PT-2008-1075 · Bluez +1 · Bluez-Libs-Devel +4

Name of the Vulnerable Software and Affected Versions: bluez-libs versions 3.30 through 3.33 bluez-utils versions 3.30 through 3.33 bluez-libs-devel versions 2.10 through 3.33 bluez-utils-cups versions 2.10 through 3.7 bluez-utils versions prior to 3.36 Description: The issue is related to the...

Debian: Security Advisory (DSA-990-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 990-1 (bluez-hcidump)

The remote host is missing an update to bluez-hcidump announced via advisory DSA 990-1. A denial of service condition has been discovered in bluez-hcidump, a utility that analyses Bluetooth HCI packets, which can be triggered remotely. The old stable distribution woody does not contain...

Debian Security Advisory DSA 782-1 (bluez-utils)

The remote host is missing an update to bluez-utils announced via advisory DSA 782-1. Henryk Plötz discovered a vulnerability in bluez-utils, tools and daemons for Bluetooth. Due to missing input sanitising it is possible for an attacker to execute arbitrary commands supplied as device name from...

BlueZ 1.x2.x - HIDD Bluetooh HID Command Injection

BlueZ 1.x2.x - HIDD Bluetooh HID Command Injection source: https://www.securityfocus.com/bid/22076/info BlueZ hidd is prone to a device-command-injection vulnerability. A remote attacker can exploit this issue to gain control of mouse and keyboard HIDs human interface device. This will allow the...

BlueZ 1.x/2.x - HIDD Bluetooh HID Command Injection

source: https://www.securityfocus.com/bid/22076/info BlueZ hidd is prone to a device-command-injection vulnerability. A remote attacker can exploit this issue to gain control of mouse and keyboard HIDs human interface device. This will allow the attacker to interact with the targeted computer in...

Ubuntu 5.10 : bluez-utils vulnerability (USN-413-1)

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled. Note that Tenable Network Security has extracted the preceding descripti...

RHEL 4 : bluez-utils (RHSA-2007:0065)

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The bluez-utils package contains Bluetooth daemons and utilities. A flaw was found in the...

security flaw

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

Moderate: Red Hat Security Advisory: bluez-utils security update

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The bluez-utils package contains Bluetooth daemons and utilities. A flaw was found in the...

MDKA-2007:008 : bluez-utils

In Mandriva 2007.0, authentication with bluetooth devices was broken 24359. This update provides an agent that will prompt for passkeys PIN code when needed. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2007:014)

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack. hidd is not enabled by default on Mandriva 2006.0. This update adds...

USN-413-1: BlueZ vulnerability

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled...

BlueZ HIDD Bluetooh HID命令注入漏洞

BlueZ HIDD Bluetooh是一款蓝牙协议实现。 BlueZ HIDD Bluetooh存在设备命令注入问题，远程攻击者可以利用漏洞控制鼠标和键盘的HID，允许与其他用户交互。 目前没有详细漏洞细节提供。 MandrakeSoft Linux Mandrake 2006.0 x8664 MandrakeSoft Linux Mandrake 2006.0 BlueZ BlueZ 2.19 BlueZ BlueZ 2.15 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debi...

BlueZ HID不安全设备连接漏洞

BUGTRAQ ID: 22076 CVECAN ID: CVE-2006-6899 BlueZ是官方的Linux蓝牙协议栈。 BlueZ的人机接口设备（HID）主机未经认证便接受设备连接，如果某些配置的HID（PSM）端点以server模式运行的话，攻击者就可能向受影响系统中加入新的蓝牙设备（如鼠标、键盘），获得完全控制。 受影响系统： BlueZ BlueZ 2.25 不受影响系统： BlueZ BlueZ 2.25 厂商补丁： BlueZ ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...