Description
Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long file name, as demonstrated via a long RFILE argument to ussp-push.
References
- 16258 vdb-entry
- ambicom-bluetooth-objectpush-bo(24179) vdb-entry
- 366 third-party-advisory
- ADV-2006-0219 vdb-entry
- 20060120 DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow' mailing-list
- http://www.digitalmunition.com/DMA%5B2006-0115a%5D.txt
- 18466 third-party-advisory