|
|
CVE Reference: CVE-2006-1367 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-1367 |
|
|
Description: The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and view phonebook entries and saved SMS messages by connecting on Bluetooth channel 3 and tricking the user into pressing Grant, aka a "Blueline" attack. NOTE: while user-assisted, the attack is made more feasible because of a GUI misrepresentation issue that allows a default message to be replaced by an attacker-specified one. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/25402 SAID Secunia Advisory: SA19319 MISC http://www.digitalmunition.com/DMA[2006-0321a].txt FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/428431/100/0/threaded BID 17190 |
|
| Return to the previous page. |
