OSVDB ID: 22380 Title: Toshiba Bluetooth Stack Traversal Arbitrary File Upload |
Info |
|
|
Dates |
||||
|
|
Description |
Toshiba's Bluetooth Stack contains a flaw that allows a remote attacker to upload arbitrary files to the target computers's file system, using 'OBEX Push' calls. The issue is due to the stack not properly sanitizing user input, specifically traversal style attacks (../../) supplied via a client software. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|
digitalmunition.com -