• info
• discussion
• exploit
• solution
• references

BlueZ HIDD Bluetooh HID Command Injection Vulnerability

Solution:
The vendor has addressed this issue as of version 2.25. Please see the references for more information.


BlueZ BlueZ 2.20

• Ubuntu bluez-cups_2.20-0ubuntu3.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-cups_2 .20-0ubuntu3.1_amd64.deb


• Ubuntu bluez-cups_2.20-0ubuntu3.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-cups_2 .20-0ubuntu3.1_i386.deb


• Ubuntu bluez-cups_2.20-0ubuntu3.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-cups_2 .20-0ubuntu3.1_powerpc.deb


• Ubuntu bluez-cups_2.20-0ubuntu3.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-cups_2 .20-0ubuntu3.1_sparc.deb


• Ubuntu bluez-pcmcia-support_2.20-0ubuntu3.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-pcmcia -support_2.20-0ubuntu3.1_i386.deb


• Ubuntu bluez-pcmcia-support_2.20-0ubuntu3.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-pcmcia -support_2.20-0ubuntu3.1_powerpc.deb


• Ubuntu bluez-pcmcia-support_2.20-0ubuntu3.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-pcmcia -support_2.20-0ubuntu3.1_sparc.deb


• Ubuntu bluez-utils_2.20-0ubuntu3.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-utils_ 2.20-0ubuntu3.1_amd64.deb


• Ubuntu bluez-utils_2.20-0ubuntu3.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-utils_ 2.20-0ubuntu3.1_i386.deb


• Ubuntu bluez-utils_2.20-0ubuntu3.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-utils_ 2.20-0ubuntu3.1_powerpc.deb


• Ubuntu bluez-utils_2.20-0ubuntu3.1_sparc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/bluez-utils/bluez-utils_ 2.20-0ubuntu3.1_sparc.deb

BlueZ BlueZ 1.12

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 1.16

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 1.17

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 1.23

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 1.24

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 1.5

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 2.11

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 2.15

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz

BlueZ BlueZ 2.19

• BlueZ bluez-utils-3.8.tar.gz
  http://www.bluez.org/redirect.php?url=http%3A%2F%2Fbluez.sf.net%2Fdown load%2Fbluez-utils-3.8.tar.gz


• Mandriva bluez-utils-2.19-7.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva bluez-utils-2.19-7.1.20060mdk.src.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva bluez-utils-2.19-7.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva bluez-utils-cups-2.19-7.1.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download


• Mandriva bluez-utils-cups-2.19-7.1.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://www.mandriva.com/en/download