CVE-2006-0212

Currently unrated

Key Information:

Vendor
Toshiba
Status
Bluetooth Stack
Vendor
CVE Published:
14 January 2006

Summary

Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\ sequences in the RFILE argument of ussp-push.

References

http://www.securityfocus.com/archive/1/421993/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?...
x_refsource_MISC
http://www.securityfocus.com/bid/16236
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.