hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.

From Red Hat Security Advisory 2007:0065 :

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The bluez-utils package contains Bluetooth daemons and utilities.

A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. (CVE-2006-6899)

Note that Red Hat Enterprise Linux does not come with the Bluetooth HID daemon enabled by default.

Users of bluez-utils are advised to upgrade to these updated packages, which contains a backported patch to correct this issue.

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The bluez-utils package contains Bluetooth daemons and utilities.

A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. (CVE-2006-6899)

Note that Red Hat Enterprise Linux does not come with the Bluetooth HID daemon enabled by default.

Users of bluez-utils are advised to upgrade to these updated packages, which contains a backported patch to correct this issue.

A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. (CVE-2006-6899)

A flaw was discovered in the HID daemon of bluez-utils. A remote attacker could gain control of the mouse and keyboard if hidd was enabled. This does not affect a default Ubuntu installation, since hidd is normally disabled.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.

hidd is not enabled by default on Mandriva 2006.0. This update adds the --nocheck option (disabled by default) to the hidd binary, which defaults to rejecting connections from unknown devices unless
--nocheck is enabled.

The updated packages have been patched to correct this problem

ID	Name	Product	Family	Severity
67448	Oracle Linux 4 : bluez-utils (ELSA-2007-0065)	Nessus	Oracle Linux Local Security Checks	medium
67038	CentOS 4 : bluez-utils (CESA-2007:0065)	Nessus	CentOS Local Security Checks	medium
60179	Scientific Linux Security Update : bluez-utils on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
28002	Ubuntu 5.10 : bluez-utils vulnerability (USN-413-1)	Nessus	Ubuntu Local Security Checks	medium
25238	RHEL 4 : bluez-utils (RHSA-2007:0065)	Nessus	Red Hat Local Security Checks	medium
24630	Mandrake Linux Security Advisory : bluez-utils (MDKSA-2007:014)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2006-6899

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium