Detections
Analytics
Oracle Linux 4 : bluez-utils (ELSA-2007-0065)
medium Nessus Plugin ID 67448
Language:
Synopsis
The remote Oracle Linux host is missing one or more security updates.Description
From Red Hat Security Advisory 2007:0065 :Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4.
This update has been rated as having moderate security impact by the Red Hat Security Response Team.
The bluez-utils package contains Bluetooth daemons and utilities.
A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. (CVE-2006-6899)
Note that Red Hat Enterprise Linux does not come with the Bluetooth HID daemon enabled by default.
Users of bluez-utils are advised to upgrade to these updated packages, which contains a backported patch to correct this issue.
Solution
Update the affected bluez-utils packages.See Also
https://oss.oracle.com/pipermail/el-errata/2007-May/000133.html
Plugin Details
Severity: Medium
ID: 67448
File Name: oraclelinux_ELSA-2007-0065.nasl
Version: 1.8
Type: local
Agent: unix
Published: 7/12/2013
Updated: 1/14/2021
Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: Medium
Base Score: 5.4
Vector: CVSS2#AV:A/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:oracle:linux:4, p-cpe:/a:oracle:linux:bluez-utils-cups, p-cpe:/a:oracle:linux:bluez-utils
Required KB Items: Host/local_checks_enabled, Host/OracleLinux, Host/RedHat/release, Host/RedHat/rpm-list
Patch Publication Date: 5/14/2007
Vulnerability Publication Date: 12/31/2006
Reference Information
CVE: CVE-2006-6899