GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Thu Aug 18, 2005 9:48 am Post subject: [ GLSA 200508-09 ] bluez-utils: Bluetooth device name valida |
|
|
Gentoo Linux Security Advisory
Title: bluez-utils: Bluetooth device name validation vulnerability (GLSA 200508-09)
Severity: high
Exploitable: remote
Date: August 17, 2005
Bug(s): #101557
ID: 200508-09
Synopsis
Improper validation of Bluetooth device names can lead to arbitrary command execution.
Background
bluez-utils are the utilities for use with the BlueZ implementation of the Bluetooth wireless standards for Linux.
Affected Packages
Package: net-wireless/bluez-utils
Vulnerable: < 2.19
Unaffected: >= 2.19
Architectures: All supported architectures
Description
The name of a Bluetooth device is improperly validated by the hcid utility when a remote device attempts to pair itself with a computer.
Impact
An attacker could create a malicious device name on a Bluetooth device resulting in arbitrary commands being executed as root upon attempting to pair the device with the computer.
Workaround
There are no known workarounds at this time.
Resolution
All bluez-utils users should upgrade to the latest version: Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=net-wireless/bluez-utils-2.19" |
References
CAN-2005-2547
bluez-utils ChangeLog
Last edited by GLSA on Sun Jul 30, 2006 4:17 am; edited 3 times in total |
|