CVEvulnerability
CVE-2005-2547
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.
Affected configurations
• bluez project bluez 2.18
References
- http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34 Patch
- http://secunia.com/advisories/16453 secunia.com
- http://secunia.com/advisories/16476 secunia.com
- http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881 Patch, Vendor Advisory
- http://www.debian.org/security/2005/dsa-782 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml www.gentoo.org
- http://www.securityfocus.com/bid/14572 www.securityfocus.com
- https://bugs.gentoo.org/show_bug.cgi?id=101557 Patch, Vendor Advisory
- http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34 Patch
- http://secunia.com/advisories/16453 secunia.com
- http://secunia.com/advisories/16476 secunia.com
- http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881 Patch, Vendor Advisory
- http://www.debian.org/security/2005/dsa-782 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml www.gentoo.org
- http://www.securityfocus.com/bid/14572 www.securityfocus.com
- https://bugs.gentoo.org/show_bug.cgi?id=101557 Patch, Vendor Advisory