ID de Prueba:	1.3.6.1.4.1.25623.1.0.57798
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2007:014 (bluez-utils)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to bluez-utils announced via advisory MDKSA-2007:014. hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack. hidd is not enabled by default on Mandriva 2006.0. This update adds the --nocheck option (disabled by default) to the hidd binary, which defaults to rejecting connections from unknown devices unless --nocheck is enabled. The updated packages have been patched to correct this problem Affected: 2006.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2007:014 Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CAN-2006-6899 BugTraq ID: 22076 http://www.securityfocus.com/bid/22076 Bugtraq: 20070104 23C3 - Bluetooth hacking revisted [Summary and Code] (Google Search) http://www.securityfocus.com/archive/1/455889/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2007:014 http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf http://mulliner.org/bluetooth/hidattack.php http://osvdb.org/32830 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10208 http://www.redhat.com/support/errata/RHSA-2007-0065.html http://secunia.com/advisories/23747 http://secunia.com/advisories/23798 http://secunia.com/advisories/23879 http://secunia.com/advisories/25264 http://www.ubuntu.com/usn/usn-413-1 http://www.vupen.com/english/advisories/2007/0200
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.