CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

CVE-2006-6899

CVE-2006-6899 affects bluez-utils (BlueZ HID daemon: hidd) prior to version with a vulnerability in Bluetooth HID endpoints (HID PSMs) allowing a remote attacker to inject mouse/keyboard events when acting as a server. Affected component is the hidd daemon used for HID over Bluetooth; root cause ...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

MythControl (MythTV remote control) arbitrary code execution

Synopsis: MythControl MythTV remote control arbitrary code execution Product: MythControl Version: =1.0 Product: ======= MythControl makes out of your Windows Mobile 5 Smartphone the best remote control ever for MythTV or similar Media Center Products. It uses Bluetooth to communicate with your...

Debian DSA-990-1 : bluez-hcidump - programming error

A denial of service condition has been discovered in bluez-hcidump, a utility that analyses Bluetooth HCI packets, which can be triggered remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

DSA-990-1 bluez-hcidump - programming error

Bulletin has no description...

USN-256-1: bluez-hcidump vulnerability

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

Mandrake Linux Security Advisory : bluez-hcidump (MDKSA-2006:041)

Buffer overflow in l2cap.c in hcidump allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

No description provided by source. / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit...

Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation (2)

Linux Kernel 2.4.x2.6.x - Bluez BlueTooth Signed Buffer Index Privilege Escalation 2 / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2005:150)

A vulnerability in bluez-utils was discovered by Henryk Plotz. Due to missing input sanitizing, it was possible for an attacker to execute arbitrary commands supplied as a device name from the remote bluetooth device. The updated packages have been patched to correct this problem. %NASLMINLEVEL...

DTSA-9-1 bluez-utils - bad device name escaping

Bulletin has no description...

[SECURITY] [DSA 782-1] New bluez-utils packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 782-1 [email protected] http://www.debian.org/security/ Martin Schulze August 23rd, 2005 http://www.debian.org/security/faq -...

DSA-782-1 bluez-utils - missing input sanitising

Bulletin has no description...

Debian DSA-782-1 : bluez-utils - missing input sanitising

Henryk Plotz discovered a vulnerability in bluez-utils, tools and daemons for Bluetooth. Due to missing input sanitising it is possible for an attacker to execute arbitrary commands supplied as device name from the remote device. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

[Full-disclosure] Bluez hcid popen() explained.

kflistsatdigitalmunitiondotcom After the release of TheftOfLinkKey.txt I had several people mention that they did not quite understand why I consider the recently reported bluez vulnerability to be quite trivial. In this document I will attempt to outline an exploitable scenario for hcid using th...

GLSA-200508-09 : bluez-utils: Bluetooth device name validation vulnerability

The remote host is affected by the vulnerability described in GLSA-200508-09 bluez-utils: Bluetooth device name validation vulnerability The name of a Bluetooth device is improperly validated by the hcid utility when a remote device attempts to pair itself with a computer. Impact : An attacker...