Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Vulnerability in Bluetooth Software Allows Users to Play Music in Remote computers
Posted on 20-Dec-2005 09:00 | Tags Filed under: News



The Digital Munition group have found a vulnerability that allows unauthorized remote access to PC Bluetooth audio profile.

According to the text of the advisory, users with proper software can eavesdrop a PC that has Widcomm Bluetooth software and a microphone, or play audio on the target PC.

This happens because the default security settings for headset services is low, not requiring any authentication. Of course this requires close range to work.

The exploit can be only accomplished if the victim's PC is running the Widcomm Bluetooth software. It won't affect other stacks such as the Microsoft Bluetooth (Service Pack 2) or BlueSoleil.

A workaround this vulnerability is to set authentication for the Headset Audio Gateway profile, and set Bluetooth to non-discoverable mode.

Accordin to F-Secure, setting your PC Bluetooth to non-discoverable will not remove the problem completely, as your PC can still be found by brute force scanning. But it will significantly limit the exposure.


More information: http://www.digitalmunition.com/DMA%5B2005-121...
News source: http://www.f-secure.com/weblog/#00000741...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

The President Of The USA: Donald Trump
Created by TimA, last reply by tdgeek on 27-Feb-2017 06:26 (3343 replies)
Pages... 221 222 223


"Parents' lawsuit claims FaceTime caused daughter's death"
Created by kingdragonfly, last reply by richms on 23-Feb-2017 11:03 (23 replies)
Pages... 2


Vodafone / SKY merger
Created by wingbat45, last reply by tdgeek on 25-Feb-2017 07:34 (136 replies)
Pages... 8 9 10


What is this green cabinet for?
Created by DarthKermit, last reply by MadEngineer on 24-Feb-2017 21:13 (20 replies)
Pages... 2


SureSignal missed calls
Created by hairy1, last reply by froob on 23-Feb-2017 20:23 (19 replies)
Pages... 2


Best way to network my computers
Created by Rikkitic, last reply by Rikkitic on 24-Feb-2017 11:24 (75 replies)
Pages... 3 4 5


Did Chorus Increase its Layer 2 speed ?
Created by Mikek, last reply by darylblake on 24-Feb-2017 22:46 (14 replies)

Unlimited Data On It's Way
Created by Prplppleater, last reply by PhantomNVD on 24-Feb-2017 22:44 (29 replies)
Pages... 2