CVE-2006-0212

Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.00.11:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.00.12:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.00.31a:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.00.32:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.01.03:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.10.00:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.20.00:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.20.01:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.20.02:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:3.20.04:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:4.00.01t:*:*:*:*:*:*:*
cpe:2.3:a:toshiba:bluetooth_stack:4.00.11:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-01-14 01:03

Updated : 2024-02-04 16:52


NVD link : CVE-2006-0212

Mitre link : CVE-2006-0212

CVE.ORG link : CVE-2006-0212


JSON object : View

Products Affected

toshiba

  • bluetooth_stack