Bug#302704: CAN-2005-0750: Possible local root exploit through insufficient range checking in af_bluetooth

[Moritz Muehlenhoff <jmm@inutil.org>]

Package: kernel-source-2.4.27
Severity: grave
Tags: security
Justification: user security hole

CAN-2005-0750: Insufficient range checking in af_bluetooth allows local root exploit.

This is the full advisory:
http://lists.grok.org.uk/pipermail/full-disclosure/ attachments/20050327/3f128a09/adv1.pdf

This has been fixed in 2.4.30rc3, a fix is available in Bitkeeper:
http://linux.bkbits.net:8080/linux-2.4/gnupatch@4244717faf_jG6n164uKBvLcVKTAtw

Cheers,
        Moritz 

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15)