Directory Traversal Vulnerability in Toshiba Bluetooth Stack
CVE-2006-0212

Currently unrated

Key Information:

Vendor
Toshiba
Status
Bluetooth Stack
Vendor
CVE Published:
14 January 2006

Summary

The Toshiba Bluetooth Stack is susceptible to a directory traversal vulnerability in its OBEX Push services. This flaw permits remote attackers to upload files to arbitrary locations by employing crafted '..' sequences. Consequently, an attacker can manipulate the RFILE argument in ussp-push to perform unauthorized file uploads, posing significant security risks to users of Toshiba devices relying on this stack.

References

http://www.securityfocus.com/archive/1/421993/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?...
x_refsource_MISC
http://www.securityfocus.com/bid/16236
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.