CVE-2006-6899

Published: Dec 31, 2006Modified: Apr 23, 2026

5.4

Vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 5.5 / Impact: 6.4

Source: NVD

Description

hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.

Affected (1)

Products: Bluez Project: Bluez

Bluez Project

1 product

Bluez

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bluez Project Bluez	Up to 2.24

Related CWEs

CWE-16

References (28)

http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf

Source: cve@mitre.org

http://mulliner.org/bluetooth/hidattack.php

Source: cve@mitre.org

http://osvdb.org/32830

Source: cve@mitre.org

http://secunia.com/advisories/23747

Source: cve@mitre.org

http://secunia.com/advisories/23798

Source: cve@mitre.org

http://secunia.com/advisories/23879

Source: cve@mitre.org

http://secunia.com/advisories/25264

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:014

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0065.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/455889/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22076

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-413-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0200

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10208

Source: cve@mitre.org

http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf