CVE-2005-2547

no score yetEPSS 2.4%

bluez project bluez: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2005-08-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bluez_project:bluez

References

http://cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.c?r1=1.31&r2=1.34
http://secunia.com/advisories/16453
http://secunia.com/advisories/16476
http://sourceforge.net/mailarchive/forum.php?thread_id=7893206&forum_id=1881
http://www.debian.org/security/2005/dsa-782

Check your stack JSON