CVE-2006-0212: Toshiba Bluetooth Stack

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote locations specified by .. (dot dot) sequences, as demonstrated by ..\\ sequences in the RFILE argument of ussp-push.

Affected products

• Toshiba Bluetooth Stack: up to and including 4.00.23t; version 3.00.11 only; version 3.00.12 only; version 3.00.31a only; version 3.00.32 only; version 3.01.03 only; …

Published 2006-01-14. Last modified 2026-06-16.