openSUSE Security Update : the Linux Kernel (openSUSE-2017-1062) (BlueBorne)

The openSUSE Leap 42.2 kernel was updated to 4.4.87 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel BlueZ was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration...

Konftel 300IP SIP-based Conference Phone - Remote Bypass Reboot

Exploit for hardware platform in category dos / poc The Konftel 300IP is a flexible SIP-based conference phone, perfect for companies that use IP voice services. Its clear, natural sound comes from OmniSound HD, Konftel’s patented wideband audio technology. The stylishly designed Konftel 300IP is...

Hardware based malware steals contacts from all mobile platforms using only the Audio Jack!

Indian Security Research Atul Alex presented his surprise paper at the International Malware Conference, MalCon on what can be termed as the onset of next generation of hardware based malware that can target mobile devices irrespective of Platforms. Typically, one of the largest challenges for...

Code injection

The sccp-protocol component in Cisco IP Communicator CIPC 7.0 through 8.6 does not limit the rate of SCCP messages to Cisco Unified Communications Manager CUCM, which allows remote attackers to cause a denial of service via vectors that trigger 1 on hook and 2 off hook messages, as demonstrated b...

CVE-2006-6896

The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attackers to conduct unauthorized pair-up operations...

CVE-2006-6896

The vulnerability CVE-2006-6896 affects the Bluetooth stack in the Plantronics Headset, caused by improper implementation of Non-pairable mode. This allows remote attackers within range to perform unauthorized pairing operations. The provided documents do not specify any remediation, patch versio...

CVE-2006-6896: Undefined Security Weakness

The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attackers to conduct unauthorized pair-up operations...

CVE-2006-6896

The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attackers to conduct unauthorized pair-up operations...

CVE-2006-1367

The CVE-2006-1367 entry describes a vulnerability in Motorola P2K-based phones (notably PEBL U6, V600, E398) where the Headset Audio Gateway pairing is not required. The flaw allows a user-assisted attacker to connect over Bluetooth channel 3 and obtain AT-level access, enabling viewing of phoneb...

CVE-2005-4417

The default configuration of Widcomm Bluetooth for Windows BTW 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote...

CVE-2005-4417: Undefined Security Weakness

The default configuration of Widcomm Bluetooth for Windows BTW 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote...