CVE-2005-0978
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote...
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
- Record
CVE-2005-0978- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
- Record
CVE-2005-0978- Updated
- 2026-11-02
EUVDEUVD-2005-0979 No score
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
- Record
EUVD-2005-0979- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-36mh-m9fm-477q No score
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote...
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
- Record
GHSA-36mh-m9fm-477q- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | BlueSoleil 1.4 - Object Push Service BlueTooth Arbitrary File Upload / Directory Traversal | 2005-04-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0978 is a medium vulnerability (CVSS 5.0) in Ivt Bluesoleil, published April 5, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. No source names a fixed version.