SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
SecurityReason
IT News
Search
SecurityAlert Database
About SecurityAlert
ExploitAlert Database
SecurityReason Research
WLB
WLB Database
Send to WLB
About WLB
Services
Security Audit
Schedule
Prices of services
Contact
RSS
SecurityReason IT News
SecurityAlert
World Laboratory of Bugtraq
ExploitAlert
Apache
PHP
Corporate
Contact
About SecurityReason
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com
Home arrow SecurityAlert Database

Arrow  Topic :

bluez-hcidump vulnerability


Arrow  SecurityAlert : 465
Arrow  CVE : CVE-2006-0670
Arrow  SecurityRisk : Medium  Security Risk Medium  (About)
Arrow  Remote Exploit : Yes
Arrow  Local Exploit : No
Arrow  Exploit Available : No
Arrow  Credit : Martin Pitt
Arrow  Published : 22.02.2006

Arrow  Affected Software : bluez-hcidump



Arrow  Advisory Content :  

===========================================================
Ubuntu Security Notice USN-256-1 February 21, 2006
bluez-hcidump vulnerability
CVE-2006-0670
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)
Ubuntu 5.04 (Hoary Hedgehog)
Ubuntu 5.10 (Breezy Badger)

The following packages are affected:

bluez-hcidump

The problem can be corrected by upgrading the affected package to
version 1.5-2ubuntu0.1 (for Ubuntu 4.10), 1.12-1ubuntu0.1 (for Ubuntu
5.04), or 1.23-0ubuntu1.1 (for Ubuntu 5.10). In general, a standard
system upgrade is sufficient to effect the necessary changes.

Details follow:

Pierre Betouin discovered a Denial of Service vulnerability in the
handling of the L2CAP (Logical Link Control and Adaptation Layer
Protocol) layer. By sending a specially crafted L2CAP packet through a
wireless Bluetooth connection, a remote attacker could crash hcidump.

Since hcidump is mainly a debugging tool, the impact of this flaw is
very low.

Updated packages for Ubuntu 4.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.5-2ubuntu0.1.diff.gz
Size/MD5: 117334 2be393fb2b17f097d84c4bf1e41759b8

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.5-2ubuntu0.1.dsc
Size/MD5: 649 2cbb2217b51ce137d84487cc8c7e67fc

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.5.orig.tar.gz
Size/MD5: 166968 346f86c8e1824a505e976d0a2c8a0578

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.5-2ubuntu0.1_amd64.deb
Size/MD5: 25198 7d0d59b7597b7d64345e9255f29ea684

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.5-2ubuntu0.1_i386.deb
Size/MD5: 23146 93c04094444cc482058d67cb78ca7244

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.5-2ubuntu0.1_powerpc.deb
Size/MD5: 25446 ccfa304db68953e1d2989df0fed8259c

Updated packages for Ubuntu 5.04:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.12-1ubuntu0.1.diff.gz
Size/MD5: 2277 09602446f4bdae6c8126e33db11f3249

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.12-1ubuntu0.1.dsc
Size/MD5: 663 8efc5c10713d06de9d55613055208bca

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.12.orig.tar.gz
Size/MD5: 102003 c64f44a05e3c3f036134850c8fb24a00

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.12-1ubuntu0.1_amd64.deb
Size/MD5: 39052 4f466a14a74802cb0ea83d9859d108a9

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.12-1ubuntu0.1_i386.deb
Size/MD5: 35048 9b767b24c3ce114a9b44cc9901335826

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.12-1ubuntu0.1_powerpc.deb
Size/MD5: 37636 9934f9d3c03affe2a3c7d84b00cacbed

Updated packages for Ubuntu 5.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.23-0ubuntu1.1.diff.gz
Size/MD5: 2454 9ff0a74db5cd83914ed466a8acdf0beb

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.23-0ubuntu1.1.dsc
Size/MD5: 662 5191c2d9cabb93969ce0604548ddc696

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.23.orig.tar.gz
Size/MD5: 124717 24a72cfc605278f2846c786ae54230c2

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.23-0ubuntu1.1_amd64.deb
Size/MD5: 68856 9ed3cd8a70fdf2f494002894208029a2

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.23-0ubuntu1.1_i386.deb
Size/MD5: 62994 c6fab1702f2dab19af5bd2ff86af07a5

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/pool/main/b/bluez-hcidump/bluez-hcidum
p_1.23-0ubuntu1.1_powerpc.deb
Size/MD5: 69474 b75ce72ab552b0b32c301c854ea7e549
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (GNU/Linux)

iD8DBQFD+zIgDecnbV4Fd/IRAkQDAKCzieEBvK2J25egBwPhd9VSUE4DFwCeMaOs
H041vMyXZWHOGCpqbMwzvCc=
=5FAy
-----END PGP SIGNATURE-----




Arrow  Feedback :

If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com.
Alert

libc/fnmatch(3) DoS

Security Risk Medium- 2011-05-13

Allow attacker to denial of service apache 2.2.17 server
Apache RSS Apache Alert

» Apache HTTP Server Denial
   of Service Vulnerability

» Multiple Vendors
   libc/fnmatch(3) DoS (incl
   apache poc)

» Apache Continuum
   cross-site scripting
   vulnerability

» Apache Tomcat DoS
   Vulnerability
PHP RSS PHP Alert

» PHP Hashtables Denial of
   Service

» PHP 5.3.6 multiple null
   pointer dereference

» PHP 5.3.6 ZipArchive
   invalid use glob(3)

» libzip 0.9.3
   _zip_name_locate NULL
   Pointer Dereference (incl
   PHP 5.3.5)
ADT

Protect your family and valuables with Home Security Systems
Copyright © SecurityReason.com. All Rights Reserved.