CVE-2005-2547: High severity Bluez Project Bluez vulnerability
Published Aug 12, 2005
·Updated
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.
Affected Software
1 affected component
Bluez Project Bluez=2.18
Remediation
Patch Available
Event History
Aug 12, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2547?
CVE-2005-2547 is classified as a critical vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2005-2547?
To fix CVE-2005-2547, update BlueZ to version 2.19 or later where the vulnerability has been patched.
3
What systems are affected by CVE-2005-2547?
CVE-2005-2547 affects BlueZ versions 2.16, 2.17, and 2.18.
4
What type of attack does CVE-2005-2547 enable?
CVE-2005-2547 enables remote attackers to execute arbitrary commands through specially crafted Bluetooth device names.
5
Is there a workaround for CVE-2005-2547 until I can apply the patch?
A potential workaround for CVE-2005-2547 is to disable Bluetooth services until the software can be updated.