Bluetooth flaw allows DoS attack

This is the tool that goes 'ping!'

Iain Thomson

A flaw has been identified in the Bluetooth stack which could allow a denial of service attack that destroys the ability to link devices.

The flaw was reported on the Bugtraq mailing list by Spanish security consultant Hugo Vázquez Caramés and details have been forwarded to the Bluetooth organising body.

Advertisement

"The vulnerability is a simple denial of service that can be reproduced with the l2ping Linux tool," said Caramés.

"Due to the nature of 'ping' in the Bluetooth protocol, where a connection must be established, and the limited amount of connections that [standard] Bluetooth stacks can manage, a simple ping flood with l2ping can inhibit Bluetooth on many devices.

"The device then cannot do a device discovery, and other devices cannot connect to it."

The attack works by flooding the device with pings, taking up all available requests in the stack. The target device will then stop trying to make connections and may need to be rebooted in order to work properly.

Nokia has already recognised the problem and produced a software tool that protects its users from any attacks. The potentially affected Nokia models include the 6310, 6310i, 6650, 8910 and 8910i mobile phones, the Nokia 610 car kit phone, and the Nokia 810 car phone.

"Even though Nokia believes the real security risk is very small, we are introducing a software upgrade to ensure security in Bluetooth devices in the above mentioned phone models," said the company in a statement.

"To get an upgrade, owners of the above mentioned phone models may contact the Nokia Customer Care Line in your home country or an authorised Nokia Service Point."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

Social networking

Summit: How businesses should manage their brands online

In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies

RIM discusses new developer tools

Blackberry exec on the latest offerings for programmers

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Alcatel-Lucent logo

Summit: Networks swamped by information overload

Alcatel-Lucent's Neal Tilley talks about how enterprises and carriers can...

EU flag

Breach notification laws get green light

Privacy rights strengthened in Europe

Richard Thomas

Summit: Richard Thomas advises on handling the data deluge

Former Information Commissioner speaks out on government databases and data...

oracle sun

War of words escalates between EU and Oracle

Commission comes out fighting after criticism from Oracle and Washington

Primary Navigation