USN-256-1: bluez-hcidump vulnerability

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...

CVE-2006-0797

The CVE-2006-0797 entry concerns Nokia N70 devices where a remote attacker can cause a denial of service (reboot or shutdown) via a malformed L2CAP packet over Bluetooth. The root cause is a mismatch: the packet length field is shorter than the actual packet, which can trigger a buffer overflow i...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

Buffer overflow

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0670

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...

CVE-2006-0670

CVE-2006-0670 is a buffer overflow in bluez-hcidump’s l2cap.c (hcidump 1.29) allowing a remote attacker to crash the system via a malformed L2CAP packet over Bluetooth. Debian/Ubuntu advisories document remote DoS with bluez-hcidump and show fixed/upgraded packages (e.g., bluez-hcidump 1.17-1sarg...

Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================================= Sony/Ericsson Bluetooth Reset Display Denial of Service Exploit ================================================================= / Sony/Ericsson reset display - PoC / / Pierre...

[ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer

Software BSS - Bluetooth Stack Smasher Version 0.6 Location BSS could be downloaded on http://www.secuobs.com/news/05022006-bluetooth10.shtml Credits Pierre Betouin - [email protected] Bug was found on following devices : hcidump, Sony/ericsson K600i/V600i/W800i, Nokia N70 & SAMSUNG E73...

[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones

Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...

Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit

No description provided by source. / Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / /...

Sony/Ericsson Bluetooth - Reset Display Denial of Service

/ Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / / cell phones / / Vulnerable tested...