VULNERABILITY INTELLIGENCE
CVE-2006-0212
CVSS score5 NONE
EPSS probability2.55%
CISA KEVNot currently listed
Published2006-01-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory