NVD

Id
60076  
Name
CVE-2006-1367  
Description
The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and view phonebook entries and saved SMS messages by connecting on Bluetooth channel 3 and tricking the user into pressing Grant, aka a "Blueline" attack. NOTE: while user-assisted, the attack is made more feasible because of a GUI misrepresentation issue that allows a default message to be replaced by an attacker-specified one.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-03-23  
Modified Date
2011-06-20  
Seq
2006-1367  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
309266 60076 CVE-2006-1367 20060321 DMA[2006-0321a] - "Motorola P2K Platform setpath() overflow and Blueline attack"  View
309267 60076 CVE-2006-1367 http://www.digitalmunition.com/DMA[2006-0321a].txt  View
309268 60076 CVE-2006-1367 20060321 DMA[2006-0321a] - "Motorola P2K Platform setpath() overflow and Blueline attack"  View
309269 60076 CVE-2006-1367 17190  View
309270 60076 CVE-2006-1367 ADV-2006-1045  View
309271 60076 CVE-2006-1367 motorola-peblu6-v600-name-spoofing(25402)  View

Related JVN