PT-2006-7494 · Widcomm · Widcomm Bluetooth For Windows

Published 2006-12-31 · Updated 2018-10-17 · CVE-2006-6897

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Widcomm Bluetooth for Windows (BTW) version 3.0.1.905

Description: A directory traversal issue allows remote attackers to perform unauthorized file operations by using a .. (dot dot) in an unspecified parameter. This could potentially lead to access and manipulation of sensitive files.

Recommendations: For Widcomm Bluetooth for Windows (BTW) version 3.0.1.905, consider restricting access to sensitive files and directories as a temporary mitigation measure until a patch is available. Avoid using the vulnerable parameter in file operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-6897

Affected Products

Widcomm Bluetooth For Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-6897 · Security Note
• http://osvdb.org/37590 · Note
• http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf · Note
• http://securityfocus.com/archive/1/455889/100/0/threaded · Note