Unscored severity · published Jan 14, 2006
CVE-2006-0212
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Bluetooth Stack · Toshiba
through 4.00.23t; 3.00.11; 3.00.12; 3.00.31a; 3.00.32; 3.01.03; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0212
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0212
aps.toshiba-tro.de
http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2
marc.info
http://marc.info/?l=full-disclosure&m=113712413907526&w=2
Vendor Advisory
http://secunia.com/advisories/18437
securitytracker.com
http://securitytracker.com/id?1015486
Exploit
http://www.digitalmunition.com/DMA%5B2006-0112a%5D.txt
www.osvdb.org
http://www.osvdb.org/22380
More from Bluetooth Stack
–
CVE-2015-0884
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a…
–
CVE-2006-5611
Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) "Security fix." NOTE: due to the lack of…
–
CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that…