CVE-2002-0396
The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
Date published : 2004-09-01
http://www.atstake.com/research/advisories/2002/a060502-1.txt