Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)

The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...

Mandrake Linux Security Advisory : bluez-utils (MDKSA-2007:014)

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack. hidd is not enabled by default on Mandriva 2006.0. This update adds...

USN-413-1: BlueZ vulnerability

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled...

BlueZ HIDD Bluetooh HID命令注入漏洞

BlueZ HIDD Bluetooh是一款蓝牙协议实现。 BlueZ HIDD Bluetooh存在设备命令注入问题，远程攻击者可以利用漏洞控制鼠标和键盘的HID，允许与其他用户交互。 目前没有详细漏洞细节提供。 MandrakeSoft Linux Mandrake 2006.0 x8664 MandrakeSoft Linux Mandrake 2006.0 BlueZ BlueZ 2.19 BlueZ BlueZ 2.15 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debi...

BlueZ HID不安全设备连接漏洞

BUGTRAQ ID: 22076 CVECAN ID: CVE-2006-6899 BlueZ是官方的Linux蓝牙协议栈。 BlueZ的人机接口设备（HID）主机未经认证便接受设备连接，如果某些配置的HID（PSM）端点以server模式运行的话，攻击者就可能向受影响系统中加入新的蓝牙设备（如鼠标、键盘），获得完全控制。 受影响系统： BlueZ BlueZ 2.25 不受影响系统： BlueZ BlueZ 2.25 厂商补丁： BlueZ ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-6899

CVE-2006-6899 affects bluez-utils (BlueZ HID daemon: hidd) prior to version with a vulnerability in Bluetooth HID endpoints (HID PSMs) allowing a remote attacker to inject mouse/keyboard events when acting as a server. Affected component is the hidd daemon used for HID over Bluetooth; root cause ...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

Sql injection

SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter...