Back to search
CVE-2009-0244
Published: Jan 21, 2009
Modified: Aug 7, 2024
PUBLISHED
Description
Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname. NOTE: this can be leveraged for code execution by writing to a Startup folder.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
33598
third-party-advisory
x_refsource_SECUNIA
20090119 Microsoft Bluetooth Stack OBEX Directory Traversal
mailing-list
x_refsource_BUGTRAQ
4938
third-party-advisory
x_refsource_SREASON
33359
vdb-entry
x_refsource_BID
winmobile-obexftp-directory-traversal(48124)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now