Ubuntu 5.10 : bluez-utils vulnerability (USN-413-1)

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled. Note that Tenable Network Security has extracted the preceding descripti...

RHEL 4 : bluez-utils (RHSA-2007:0065)

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The bluez-utils package contains Bluetooth daemons and utilities. A flaw was found in the...

Moderate: Red Hat Security Advisory: bluez-utils security update

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The bluez-utils package contains Bluetooth daemons and utilities. A flaw was found in the...

security flaw

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

MDKA-2007:008 : bluez-utils

In Mandriva 2007.0, authentication with bluetooth devices was broken 24359. This update provides an agent that will prompt for passkeys PIN code when needed. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2007:014)

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack. hidd is not enabled by default on Mandriva 2006.0. This update adds...

USN-413-1: BlueZ vulnerability

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled...

BlueZ HIDD Bluetooh HID命令注入漏洞

BlueZ HIDD Bluetooh是一款蓝牙协议实现。 BlueZ HIDD Bluetooh存在设备命令注入问题，远程攻击者可以利用漏洞控制鼠标和键盘的HID，允许与其他用户交互。 目前没有详细漏洞细节提供。 MandrakeSoft Linux Mandrake 2006.0 x8664 MandrakeSoft Linux Mandrake 2006.0 BlueZ BlueZ 2.19 BlueZ BlueZ 2.15 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debi...

BlueZ HID不安全设备连接漏洞

BUGTRAQ ID: 22076 CVECAN ID: CVE-2006-6899 BlueZ是官方的Linux蓝牙协议栈。 BlueZ的人机接口设备（HID）主机未经认证便接受设备连接，如果某些配置的HID（PSM）端点以server模式运行的话，攻击者就可能向受影响系统中加入新的蓝牙设备（如鼠标、键盘），获得完全控制。 受影响系统： BlueZ BlueZ 2.25 不受影响系统： BlueZ BlueZ 2.25 厂商补丁： BlueZ ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-6899

CVE-2006-6899 affects bluez-utils (BlueZ HID daemon: hidd) prior to version with a vulnerability in Bluetooth HID endpoints (HID PSMs) allowing a remote attacker to inject mouse/keyboard events when acting as a server. Affected component is the hidd daemon used for HID over Bluetooth; root cause ...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

MythControl (MythTV remote control) arbitrary code execution

Synopsis: MythControl MythTV remote control arbitrary code execution Product: MythControl Version: =1.0 Product: ======= MythControl makes out of your Windows Mobile 5 Smartphone the best remote control ever for MythTV or similar Media Center Products. It uses Bluetooth to communicate with your...

Debian DSA-990-1 : bluez-hcidump - programming error

A denial of service condition has been discovered in bluez-hcidump, a utility that analyses Bluetooth HCI packets, which can be triggered remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

DSA-990-1 bluez-hcidump - programming error

Bulletin has no description...

USN-256-1: bluez-hcidump vulnerability

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

Mandrake Linux Security Advisory : bluez-hcidump (MDKSA-2006:041)

Buffer overflow in l2cap.c in hcidump allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet. The updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C...

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

No description provided by source. / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit...