ConnMan CVE-2012-6459 Information Disclosure Vulnerability

Bugtraq ID:	57136
Class:	Design Error
CVE:	CVE-2012-6459
Remote:	Yes
Local:	No
Published:	Jan 02 2013 12:00AM
Updated:	Jan 02 2013 12:00AM
Credit:	yu liyun
Vulnerable:	Tizen Tizen 0 connman connman 1.3
Not Vulnerable:

ConnMan CVE-2012-6459 Information Disclosure Vulnerability

ConnMan is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

ConnMan 1.3 is vulnerable; other versions may also be affected.

ConnMan CVE-2012-6459 Information Disclosure Vulnerability

Attackers can use readily available tools to exploit this issue.

ConnMan CVE-2012-6459 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

ConnMan CVE-2012-6459 Information Disclosure Vulnerability

References:

• connman homepage (connaman)
  
• Tizen Homepage (Tizen Project)
  
• CVE-2012-6459 : still see bluetooth service even offline mode turned on (Tizen Project)