PT-2006-1328 · Ambicom · Ambicom Blue Neighbors

Kevin Finisterre · Published 2006-01-18 · Updated 2018-10-19 · CVE-2006-0253

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AmbiCom Blue Neighbors versions 2.50 Build 2500 and earlier

Description The issue is related to a buffer overflow in the Bluetooth OBEX Object Push service. This occurs in the "Blue Neighbors.EXE" component and can be triggered by remote attackers sending a long file name. Specifically, the vulnerability can be exploited via a long RFILE argument to ussp-push, allowing attackers to execute arbitrary code.

Recommendations For AmbiCom Blue Neighbors versions 2.50 Build 2500 and earlier, consider disabling the Bluetooth OBEX Object Push service until a patch is available to prevent remote attackers from executing arbitrary code via a long file name. Restrict access to the ussp-push service to minimize the risk of exploitation. Avoid using long file names in the RFILE argument to prevent triggering the buffer overflow.

Exploit

Fix

Related Identifiers

CVE-2006-0253

Affected Products

Ambicom Blue Neighbors

References · 8

• 🔥 http://digitalmunition.com/DMA%5B2006-0115a%5D.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0253 · Security Note
• http://secunia.com/advisories/18466 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0219 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24179 · Note
• http://securityfocus.com/bid/16258 · Note
• http://securityfocus.com/archive/1/422481/100/0/threaded · Note
• http://securityreason.com/securityalert/366 · Note