132 matches found
CVE-2006-0253
CVE-2006-0253 describes a buffer overflow in the Bluetooth OBEX Object Push service of AmbiCom Blue Neighbors, specifically in the Blue Neighbors.EXE client. The vulnerability arises from processing a long file name (RFILE argument to ussp-push), enabling a remote attacker to potentially execute ...
CVE-2006-0253
Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long file name, as demonstrated via a long RFILE argument to ussp-push...
Buffer overflow
Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long file name, as demonstrated via a long RFILE argument to ussp-push...
CVE-2006-0253: Undefined Security Weakness
Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long file name, as demonstrated via a long RFILE argument to ussp-push...
CVE-2006-0212
CVE-2006-0212 concerns the OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier. The vulnerability is a directory traversal that lets remote attackers upload arbitrary files to arbitrary remote locations by exploiting .. (dot dot) sequences, as demonstrated by ..\ sequences in the...
CVE-2006-0212: Undefined Security Weakness
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23T and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. dot dot sequences, as demonstrated by ..\ sequences in the RFILE argument of ussp-push...
[Full-disclosure] DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal'
DMA2006-0112a - 'Toshiba Bluetooth Stack Directory Transversal' Author: Kevin Finisterre Vendor: http://www.toshiba-tro.de/ Product: 'Toshiba Bluetooth Stack =v4.00.23T' References: http://www.digitalmunition.com/DMA2006-0112a.txt Description: Toshiba was one of the first companies to provide a...
CVE-2005-3995
Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...
CVE-2005-3995: Undefined Security Weakness
Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...
CVE-2005-3995
Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...
CVE-2005-3995
The CVE applies to the Sobexsrv OBEX server, specifically the dosyslog function in obexsrv.c. When the syslog -S option is enabled, a format string vulnerability in OBEX file-name arguments can allow remote attackers to execute arbitrary code. Affected software/version: Sobexsrv prior to 1.0.0-pr...
DMA[2005-1202a] - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability'
DMA2005-1202a - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability' Author: Kevin Finisterre Vendor: http://www.mulliner.org/bluetooth/sobexsrv.php Product: 'sobexsrv' References: http://www.digitalmunition.com/DMA2005-1202a.txt...
sobexsrv bluetooth OBEX server format string bug
syslog format string bug...
CVE-2005-3093
Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer...
CVE-2005-3093
Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer...
CVE-2005-3093
Technical details about CVE-2005-3093 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.
CVE-2005-3093: Undefined Security Weakness
Nokia 7610 and 3210 phones allows attackers to cause a denial of service via certain characters in the filename of a Bluetooth OBEX transfer...
[Full-disclosure] Nokia 7610, 3210 denial of service in OBEX.
Title: Nokia 7610, 3210 Denial of Service in OBEX. Severity: Low Affected: tested in nokia 7610 and nokia 3210 maybe others symbian phones. Problem type: remote Details: ---------------------------------------------------------------------------------------------------------- They are some flaw i...
Debian DSA-762-1 : affix - several vulnerabilities
Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-2250 A buffer overflow allows remote attackers to...