Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Toshiba蓝牙栈Object Push服务文件上传目录遍历漏洞
Vulnerability Description
Toshiba蓝牙栈是东芝公司提供的蓝牙PC栈，支持v1.2规范。 Toshiba蓝牙栈的Object Push服务中存在目录遍历漏洞，远程攻击可上传文件到任意可写目录。用户如果接受了连接请求提示的话，会要求指定文件下载位置。无论用户指定了什么路径，攻击者都可以将文件上传至任何可写的位置。在连接期间，不会出现文件名，因此受害用户不会知道正在发生的攻击。
CVSS Information
N/A
Vulnerability Type
N/A