CVE-2006-0212

Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.

• http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2
• http://marc.info/?l=full-disclosure&m=113712413907526&w=2
• http://secunia.com/advisories/18437Vendor Advisory
• http://securitytracker.com/id?1015486
• http://www.digitalmunition.com/DMA%5B2006-0112a%5D.txtExploit, Vendor Advisory
• http://www.osvdb.org/22380
• http://www.securityfocus.com/archive/1/421993/100/0/threaded
• http://www.securityfocus.com/bid/16236
• http://www.vupen.com/english/advisories/2006/0184
• http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2
• http://marc.info/?l=full-disclosure&m=113712413907526&w=2
• http://secunia.com/advisories/18437Vendor Advisory
• http://securitytracker.com/id?1015486
• http://www.digitalmunition.com/DMA%5B2006-0112a%5D.txtExploit, Vendor Advisory
• http://www.osvdb.org/22380
• http://www.securityfocus.com/archive/1/421993/100/0/threaded
• http://www.securityfocus.com/bid/16236
• http://www.vupen.com/english/advisories/2006/0184

Published

Jan 14, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0206Eval injection vulnerability in Light Weight Calendar (LWC) …
• CVE-2006-0207Multiple HTTP response splitting vulnerabilities in PHP 5.1.…
• CVE-2006-0208Multiple cross-site scripting (XSS) vulnerabilities in PHP 4…
• CVE-2006-0209SQL injection vulnerability in general_functions.php in Tank…
• CVE-2006-0210Cross-site scripting (XSS) vulnerability in index.php in Int…
• CVE-2006-0211Cross-site scripting (XSS) vulnerability in forgotPassword.a…
• CVE-2006-0213Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-2…
• CVE-2006-0214Eval injection vulnerability in ezDatabase 2.0 and earlier a…
• CVE-2006-0215Cross-site scripting (XSS) vulnerability in admin.php in Qua…
• CVE-2006-0216admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 a…
• CVE-2006-0217Multiple cross-site scripting (XSS) vulnerabilities in Ultim…
• CVE-2006-0218Multiple unspecified vulnerabilities in MyBulletinBoard (MyB…