CVE-2009-0244
FTP service for a Bluetooth device allows listing of directories, and creation or reading of files using ".." sequences.
CVE-2009-4013
Software package maintenance program allows overwriting arbitrary files using "../" sequences.