Bluetooth - the patch that didn't patch
Microsoft has released a new version of the patch to close the Bluetooth security hole in Windows XP SP2 and SP3. The version released on patch day did not do what it was supposed to, leaving systems vulnerable even after it was installed. According to Security Bulletin MS08-030, an error occurred when the Bluetooth service experienced a large number of service discovery protocol packets (SDP), permitting code to be injected and executed.
The new patch is already being distributed through Windows Update. The initial version of the patch for Vista fixed the security hole so it does not need updating. Microsoft is currently investigating how this error occurred. So far it seems that two separate instances of human error contributed.
See also:
- MS08-030 Re-released for Windows XP SP2 and SP3, Technet Blog post
(mba)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
