CVE-2006-6899 Missing authorization in n/a

Medium 5.4 Published 8 Jan 2007 Updated 7 Aug 2024

Remote attackers can hijack Bluetooth HID devices by exploiting a configuration flaw in the BlueZ hidd daemon, requiring specific endpoint setups.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2006-6899?

CVE-2006-6899 is a medium-severity missing authorization vulnerability in n/a, published on 8 Jan 2007. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.

Weakness: CWE-16

Which versions are affected by CVE-2006-6899?

It affects 1 product.

Linux distribution packages (12)

`bluez-utils` Red Hat:enterprise_linux:4::as	All versions	`0:2.10-2.2`
`bluez-utils-cups` Red Hat:enterprise_linux:4::as	All versions	`0:2.10-2.2`
`bluez-utils-debuginfo` Red Hat:enterprise_linux:4::as	All versions	`0:2.10-2.2`
`bluez-utils` Red Hat:enterprise_linux:4::desktop	All versions	`0:2.10-2.2`
`bluez-utils-cups` Red Hat:enterprise_linux:4::desktop	All versions	`0:2.10-2.2`
`bluez-utils-debuginfo` Red Hat:enterprise_linux:4::desktop	All versions	`0:2.10-2.2`
`bluez-utils` Red Hat:enterprise_linux:4::es	All versions	`0:2.10-2.2`
`bluez-utils-cups` Red Hat:enterprise_linux:4::es	All versions	`0:2.10-2.2`
`bluez-utils-debuginfo` Red Hat:enterprise_linux:4::es	All versions	`0:2.10-2.2`
`bluez-utils` Red Hat:enterprise_linux:4::ws	All versions	`0:2.10-2.2`
`bluez-utils-cups` Red Hat:enterprise_linux:4::ws	All versions	`0:2.10-2.2`
`bluez-utils-debuginfo` Red Hat:enterprise_linux:4::ws	All versions	`0:2.10-2.2`

Products include Bluez Project Bluez.

How do I fix CVE-2006-6899?

Upgrade to a fixed version.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2006-6899 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-6899 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-3c54-jw9j-cwjh, RHSA-2007:0065.