Description
Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service (device shutdown), and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer (aka FTP) service on Bluetooth channel 9.
References
- motorola-peblu6-v600-obex-bo(25401) vdb-entry
- 20060321 DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack' mailing-list
- 19319 third-party-advisory
- 17185 vdb-entry
- http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt
- ADV-2006-1045 vdb-entry
- 20060321 DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack' mailing-list