Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-0978. PoCs published by Kevin Finisterre.
AI-analyzed exploit summary This exploit modifies the obextool client to perform a directory traversal attack during Bluetooth file uploads, allowing an attacker to upload a malicious file to arbitrary locations on the target system. The vulnerability lies in the Object Push Service of BlueSoleil, enabling arbitrary code execution if the file is placed in an executable path.
Description
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
Exploits (1)
This exploit modifies the obextool client to perform a directory traversal attack during Bluetooth file uploads, allowing an attacker to upload a malicious file to arbitrary locations on the target system. The vulnerability lies in the Object Push Service of BlueSoleil, enabling arbitrary code execution if the file is placed in an executable path.