1364 matches found
CVE-2007-1353
The setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34.3 allows context-dependent attackers to read kernel memory and obtain sensitive information via unspecified vectors involving the copyfromuser function accessing an uninitialized stack buffer...
CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service reboot via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was...
Toshiba bluetooth stack buffer overflow
"BlueSmack" attack L2CAP echo request large payload causes buffer overflow...
Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)
Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...
USN-256-1: bluez-hcidump vulnerability
Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP Logical Link Control and Adaptation Layer Protocol layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump. Since hcidump is mainly a...
CVE-2006-0797
The CVE-2006-0797 entry concerns Nokia N70 devices where a remote attacker can cause a denial of service (reboot or shutdown) via a malformed L2CAP packet over Bluetooth. The root cause is a mismatch: the packet length field is shorter than the actual packet, which can trigger a buffer overflow i...
Buffer overflow
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...
CVE-2006-0671
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...
CVE-2006-0670
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...
CVE-2006-0670
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...
CVE-2006-0670
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service crash through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet...
CVE-2006-0670
CVE-2006-0670 is a buffer overflow in bluez-hcidump’s l2cap.c (hcidump 1.29) allowing a remote attacker to crash the system via a malformed L2CAP packet over Bluetooth. Debian/Ubuntu advisories document remote DoS with bluez-hcidump and show fixed/upgraded packages (e.g., bluez-hcidump 1.17-1sarg...
Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit
Exploit for hardware platform in category dos / poc ================================================================= Sony/Ericsson Bluetooth Reset Display Denial of Service Exploit ================================================================= / Sony/Ericsson reset display - PoC / / Pierre...
[ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer
Software BSS - Bluetooth Stack Smasher Version 0.6 Location BSS could be downloaded on http://www.secuobs.com/news/05022006-bluetooth10.shtml Credits Pierre Betouin - [email protected] Bug was found on following devices : hcidump, Sony/ericsson K600i/V600i/W800i, Nokia N70 & SAMSUNG E73...
[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones
Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...
Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit
No description provided by source. / Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / /...
Sony/Ericsson Bluetooth - Reset Display Denial of Service
/ Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / / cell phones / / Vulnerable tested...