Similar Items: Security Analysis of Time-of-Arrival Estimation via Cross-Correlation under Narrow-Band Conditions