Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Vulnerability in Bluetooth Software Allows Users to Play Music in Remote computers
Posted on 20-Dec-2005 09:00. | Tags Filed under: News.



The Digital Munition group have found a vulnerability that allows unauthorized remote access to PC Bluetooth audio profile.

According to the text of the advisory, users with proper software can eavesdrop a PC that has Widcomm Bluetooth software and a microphone, or play audio on the target PC.

This happens because the default security settings for headset services is low, not requiring any authentication. Of course this requires close range to work.

The exploit can be only accomplished if the victim's PC is running the Widcomm Bluetooth software. It won't affect other stacks such as the Microsoft Bluetooth (Service Pack 2) or BlueSoleil.

A workaround this vulnerability is to set authentication for the Headset Audio Gateway profile, and set Bluetooth to non-discoverable mode.

Accordin to F-Secure, setting your PC Bluetooth to non-discoverable will not remove the problem completely, as your PC can still be found by brute force scanning. But it will significantly limit the exposure.


More information: http://www.digitalmunition.com/DMA%5B2005-121...
News source: http://www.f-secure.com/weblog/#00000741...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

The President Of The USA - Who do you think?
Created by TimA, last reply by tdgeek on 3-Dec-2016 22:07 (870 replies)
Pages... 56 57 58


NetFlix: Download and go
Created by jamesrt, last reply by PhantomNVD on 1-Dec-2016 22:16 (28 replies)
Pages... 2


Woooaaahh earthquake 2016-11-14
Created by Fred99, last reply by Pumpedd on 1-Dec-2016 11:50 (470 replies)
Pages... 30 31 32


1GB Plan Capping Out at 100Mb Download
Created by Kopkiwi, last reply by sbiddle on 3-Dec-2016 17:10 (23 replies)
Pages... 2


'Quality' NZ news on the way?
Created by Rikkitic, last reply by Fred99 on 3-Dec-2016 23:05 (90 replies)
Pages... 4 5 6


Christmas. Bah, humbug.
Created by Rikkitic, last reply by alasta on 3-Dec-2016 13:43 (40 replies)
Pages... 2 3


Spark Ultra Fast Fibre MAX performance and discussion (Some might say Gigabit)
Created by Talkiet, last reply by sbiddle on 3-Dec-2016 21:15 (55 replies)
Pages... 2 3 4


FS: NES Classic Mini - New and unopened
Created by thewanderingv, last reply by thewanderingv on 2-Dec-2016 22:47 (17 replies)
Pages... 2