Bluetooth flaw allows DoS attack

This is the tool that goes 'ping!'

Iain Thomson

A flaw has been identified in the Bluetooth stack which could allow a denial of service attack that destroys the ability to link devices.

The flaw was reported on the Bugtraq mailing list by Spanish security consultant Hugo Vázquez Caramés and details have been forwarded to the Bluetooth organising body.

Advertisement

"The vulnerability is a simple denial of service that can be reproduced with the l2ping Linux tool," said Caramés.

"Due to the nature of 'ping' in the Bluetooth protocol, where a connection must be established, and the limited amount of connections that [standard] Bluetooth stacks can manage, a simple ping flood with l2ping can inhibit Bluetooth on many devices.

"The device then cannot do a device discovery, and other devices cannot connect to it."

The attack works by flooding the device with pings, taking up all available requests in the stack. The target device will then stop trying to make connections and may need to be rebooted in order to work properly.

Nokia has already recognised the problem and produced a software tool that protects its users from any attacks. The potentially affected Nokia models include the 6310, 6310i, 6650, 8910 and 8910i mobile phones, the Nokia 610 car kit phone, and the Nokia 810 car phone.

"Even though Nokia believes the real security risk is very small, we are introducing a software upgrade to ensure security in Bluetooth devices in the above mentioned phone models," said the company in a statement.

"To get an upgrade, owners of the above mentioned phone models may contact the Nokia Customer Care Line in your home country or an authorised Nokia Service Point."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

HTC Hero

Hands on with the HTC Hero

V3.co.uk gets a walk through of the Hero, which includes HTC's new Sense overlay for Android

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

Carlos Solari

Interview: Bell Labs security chief Carlos Solari

The former FBI and White House CIO shares his views...

Virtual world

Intel outlines the next-generation 'reality web'

Forget Web 2.0, the future is 'immersive connective experience'

PowerPoint 2010

Microsoft spills the beans on Office 2010

Web-based versions of Office apps to be available at no...

HTC Hero

Hands on with the HTC Hero

V3.co.uk gets a walk through of the Hero, which includes...

Primary Navigation