539 matches found
KLA10367 Vulnerability in Toshiba Bluetooth Stack
An unspecified vulnerability was found in Toshiba Bluetooth Stack. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely. Original advisories - Exploitation Related products Toshiba-Bluetooth-Stack CVE list CVE-2006-5611 critical...
CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service reboot via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was...
CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service reboot via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was...
CVE-2006-3146: Improper Restriction of Operations within the Bounds of a Memory Buffer
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service reboot via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was...
trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows
trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows TRSA00001 http://trifinite.org/trifiniteadvisorytoshiba.html Author: Martin Herfurt martin.herfurt at trifinite.org Organization: trifinite.org Web: http://trifinite.org/ Summary This advisory describes a...
155022006-nokia_n70.txt
Software affected Bluetooth Stack on Nokia cell phones Version Nokia N70 and maybe other models Impact Remote Denial of Service, cellular phones begin to be slower and then freeze after a short period within 30 seconds. Credits Pierre Betouin - [email protected] - Bug found with BSS new...
[ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer
Software BSS - Bluetooth Stack Smasher Version 0.6 Location BSS could be downloaded on http://www.secuobs.com/news/05022006-bluetooth10.shtml Credits Pierre Betouin - [email protected] Bug was found on following devices : hcidump, Sony/ericsson K600i/V600i/W800i, Nokia N70 & SAMSUNG E73...
DMA-2006-0112a.txt
DMA2006-0112a - 'Toshiba Bluetooth Stack Directory Transversal' Author: Kevin Finisterre Vendor: http://www.toshiba-tro.de/ Product: 'Toshiba Bluetooth Stack =v4.00.23T' References: http://www.digitalmunition.com/DMA2006-0112a.txt Description: Toshiba was one of the first companies to provide a...
CVE-2006-0212
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23T and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. dot dot sequences, as demonstrated by ..\ sequences in the RFILE argument of ussp-push...
Directory traversal
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23T and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. dot dot sequences, as demonstrated by ..\ sequences in the RFILE argument of ussp-push...
CVE-2006-0212
CVE-2006-0212 concerns the OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier. The vulnerability is a directory traversal that lets remote attackers upload arbitrary files to arbitrary remote locations by exploiting .. (dot dot) sequences, as demonstrated by ..\ sequences in the...
CVE-2006-0212
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23T and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. dot dot sequences, as demonstrated by ..\ sequences in the RFILE argument of ussp-push...
CVE-2006-0212: Undefined Security Weakness
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23T and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. dot dot sequences, as demonstrated by ..\ sequences in the RFILE argument of ussp-push...
Toshiba Bluetooth stack directory traversal
Directory traversal with filename allows to upload file to any location...
security flaw
The bluezsockcreate function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via 1 socket or 2 socketpair call with a negative protocol value...
CVE-2005-0750
CVE-2005-0750 affects the Bluetooth driver in the Linux kernel (2.4.6–2.4.30-rc1 and 2.6–2.6.11.5). The bluez_sock_create function fails to validate a negative protocol value, allowing a local user to gain privileges via a crafted socket or socketpair call. Public details appear in multiple advis...
CVE-2005-0750
The bluezsockcreate function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via 1 socket or 2 socketpair call with a negative protocol value...
