Unrated severityNVD Advisory· Published Aug 12, 2005· Updated Jun 16, 2026

CVE-2005-2547

Description

security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bluez/Bluez2 versions
cpe:2.3:o:bluez_project:bluez:2.18:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:bluez_project:bluez:2.18:*:*:*:*:*:*:*
- (no CPE)range: 2.16, 2.17, 2.18

Patches

Vulnerability mechanics

References

cvs.sourceforge.net/viewcvs.py/bluez/utils/hcid/security.cnvdPatch
sourceforge.net/mailarchive/forum.phpnvdPatchVendor Advisory
bugs.gentoo.org/show_bug.cginvdPatchVendor Advisory
secunia.com/advisories/16453nvd
secunia.com/advisories/16476nvd
www.debian.org/security/2005/dsa-782nvd
www.gentoo.org/security/en/glsa/glsa-200508-09.xmlnvd
www.securityfocus.com/bid/14572nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000