Vulnerability in Bluez Project
CVE-2006-6899
hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.4 (Medium). Vector: AV:A/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.033 (88.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 88th percentile — 88.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.033 · newest: 0.033 · change: 0.000
Affected products
Weakness classification (CWE)
References
- events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf
- osvdb.org/32830 (vdb-entry)
- www.redhat.com/support/errata/RHSA-2007-0065.html (vendor-advisory)
- www.securityfocus.com/archive/1/455889/100/0/threaded (mailing-list)
- www.vupen.com/english/advisories/2007/0200 (vdb-entry)
- secunia.com/advisories/23798 (third-party-advisory)
- www.securityfocus.com/bid/22076 (vdb-entry)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:10208 (signature, vdb-entry)
- mulliner.org/bluetooth/hidattack.php
- secunia.com/advisories/23879 (third-party-advisory)