CVE-2009-0244

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0…

published January 21, 2009

CVSS

—

EPSS

30%

Percentile

98.2

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname. NOTE: this can be leveraged for code execution by writing to a Startup folder.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.30252 · 98.2th percentile
Published: 2009-01-21T20:00Z

EPSS history

Timeline

21 JAN 20:00Z
Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0…
cvelistv5