1. CVE-Search
  2. CVE-2006-0212
ID CVE-2006-0212
Summary Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.
References
Vulnerable Configurations
  • cpe:2.3:a:toshiba:bluetooth_stack:3.00.11:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.00.11:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.00.12:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.00.12:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.00.31a:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.00.31a:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.00.32:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.00.32:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.01.03:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.01.03:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.10.00:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.10.00:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.20.00:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.20.00:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.20.01:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.20.01:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.20.02:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.20.02:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:3.20.04:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:3.20.04:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:4.00.01t:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:4.00.01t:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:4.00.11:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:4.00.11:*:*:*:*:*:*:*
  • cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:*
    cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 19-10-2018 - 15:43)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 16236
bugtraq 20060113 DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal'
fulldisc 20060113 DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal'
misc
osvdb 22380
sectrack 1015486
secunia 18437
vupen ADV-2006-0184
Last major update 19-10-2018 - 15:43
Published 14-01-2006 - 01:03
Last modified 19-10-2018 - 15:43
Back to Top