CVE:CVE-2005-0750
CNNVD:CNNVD-200503-140
Linux Kernel是开放源代码操作系统Linux的内核。
linux kernel支持蓝牙。在这个蓝牙栈中发现了本地root漏洞。
有漏洞的代码：
static int bluez_sock_create(struct socket *sock， int proto)
{
if (proto >= BLUEZ_MAX_PROTO)
return -EINVAL;
...
return bluez_proto[proto]->create(sock， proto);
}
可以通过调用socket()或socketpair()到达上述代码。如果向协议传送一个负值，就可以绕过边界检查。然后就可以将协议编号用作函数指针索引。攻击者可能将协议用作某些受控内存的索引，导致权限提升。
solution:Upgrade conectiva linux to a higher version than 10.0,and avoid the version 10.0; Upgrade linux linux_kernel to a higher version than 2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.11,2.4.12,2.4.13,2.4.14,2.4.15,2.4.16,2.4.17,2.4.18,2.4.19,2.4.20,2.4.21,2.4.22,2.4.23,2.4.24,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9:2.6.20,2.6.10,2.6.11,and avoid the version 2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.11,2.4.12,2.4.13,2.4.14,2.4.15,2.4.16,2.4.17,2.4.18,2.4.19,2.4.20,2.4.21,2.4.22,2.4.23,2.4.24,2.4.25,2.4.26,2.4.27,2.4.28,2.4.29,2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9:2.6.20,2.6.10,2.6.11; Upgrade redhat enterprise_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat fedora_core to a higher version than core_1.0,core_2.0,core_3.0,and avoid the version core_1.0,core_2.0,core_3.0; Upgrade redhat linux to a higher version than 7.3,9.0,and avoid the version 7.3,9.0; Upgrade suse suse_linux to a higher version than 1.0,9.3,and avoid the version 1.0,9.3; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1