CVE-2005-2547
CVE-2005-2547 is a high-severity vulnerability in Bluez Project Bluez with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 2% (82nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Bluez Project Bluez
- Published:
- Last modified:
Description
security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.
Frequently asked questions
- What is CVE-2005-2547?
- security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.
- How severe is CVE-2005-2547?
- CVE-2005-2547 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2005-2547 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-2547?
- CVE-2005-2547 affects Bluez Project Bluez. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2005-2547?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2005-2547 published?
- CVE-2005-2547 was published on 2005-08-12 and last updated on 2026-06-16.
References
- http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34
- http://secunia.com/advisories/16453
- http://secunia.com/advisories/16476
- http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881
- http://www.debian.org/security/2005/dsa-782
- http://www.gentoo.org/security/en/glsa/glsa-200508-09.xml
- http://www.securityfocus.com/bid/14572
- https://bugs.gentoo.org/show_bug.cgi?id=101557
Affected products (1)
- cpe:2.3:o:bluez_project:bluez:2.18:*:*:*:*:*:*:*
More vulnerabilities in Bluez Project Bluez
- CVE-2016-9918 — High (CVSS 7.5): In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file.…
- CVE-2006-6899 — Medium (CVSS 5.4): hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard…