← back
CVE-2006-6899

CVE-2006-6899

EPSS 3.2%
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/29471unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdfhttp://mulliner.org/bluetooth/hidattack.phphttp://osvdb.org/32830http://secunia.com/advisories/23747http://secunia.com/advisories/23798http://secunia.com/advisories/23879http://secunia.com/advisories/25264https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10208http://www.mandriva.com/security/advisories?name=MDKSA-2007:014http://www.redhat.com/support/errata/RHSA-2007-0065.htmlhttp://www.securityfocus.com/archive/1/455889/100/0/threadedhttp://www.securityfocus.com/bid/22076