Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 513
Alerts This Week
Warning Icon 1 513

Gentoo: GLSA 200508-09 High: Bluetooth Device Name Execution Risk

gentoo
Calendar Grey August 17, 2005
Scroller Gentoo
Gentoo Linux has issued a GLSA advisory addressing a critical vulnerability in Bluetooth that allows improper validation of device names, potentially leading to unauthorized command execution.
Improper validation of Bluetooth device names can lead to arbitrary command execution.

Summary

Gentoo Linux Security Advisory GLSA 200508-09 https://security.gentoo.org/ Severity: High Title: bluez-utils: Bluetooth device name validation vulnerability Date: August 17, 2005 Bugs: #101557 ID: 200508-09

Synopsis ======= Improper validation of Bluetooth device names can lead to arbitrary command execution.
Background ========= bluez-utils are the utilities for use with the BlueZ implementation of the Bluetooth wireless standards for Linux.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-wireless/bluez-utils < 2.19 >= 2.19
========== The name of a Bluetooth device is improperly validated by the hcid utility when a remote device attempts to pair itself w...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo command execution bluetooth validation issue

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo command execution bluetooth validation issue

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround