Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - bluez-hcidump Denial of Service (CVE-2006-0670)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

A denial of service condition has been discovered in bluez-hcidump, a utility that analyses Bluetooth HCI packets, which can be triggered remotely.

Pierre Betouin discovered a Denial of Service vulnerability in the handling of the L2CAP (Logical Link Control and Adaptation Layer Protocol) layer. By sending a specially crafted L2CAP packet through a wireless Bluetooth connection, a remote attacker could crash hcidump.

Since hcidump is mainly a debugging tool, the impact of this flaw is very low.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Buffer overflow in l2cap.c in hcidump allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet.

The updated packages have been patched to correct this issue.

ID	Name	Product	Family	Severity
198366	RHEL 4 : bluez-hcidump (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
22856	Debian DSA-990-1 : bluez-hcidump - programming error	Nessus	Debian Local Security Checks	medium
21064	Ubuntu 4.10 / 5.04 / 5.10 : bluez-hcidump vulnerability (USN-256-1)	Nessus	Ubuntu Local Security Checks	medium
20940	Mandrake Linux Security Advisory : bluez-hcidump (MDKSA-2006:041)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2006-0670

high

Tenable Plugins

high

medium

medium

medium