nokia affix Security Vulnerabilities

4 Vulnerabilities

Description
Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command. Impacted versions: 3.2.0, 2.1.2 Base Score: 10.0, Severity: HIGH, ID: CVE-2005-2277, Last Modified: 2018-08-13T21:47:00Z References Broken Link
The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name. Impacted versions: 2.1.2, 3.2.0 Base Score: 7.5, Severity: HIGH, ID: CVE-2005-2716, Last Modified: 2017-07-11T01:32:00Z References Patch Patch Exploit Exploit Exploit
The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index. Impacted versions: * Base Score: 7.2, Severity: HIGH, ID: CVE-2005-1294, Last Modified: 2016-10-18T03:18:00Z References Patch
Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share. Impacted versions: 2.0, 2.1, 3.1, 2.0.1, 2.3.0, 2.0.2, 3.0, 2.1.2, 2.1.1, 3.2.0 Base Score: 7.5, Severity: HIGH, ID: CVE-2005-2250, Last Modified: 2008-09-05T20:51:00Z References Patch Vendor Advisory Patch

Description

Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command.

Impacted versions: 3.2.0, 2.1.2

Base Score: 10.0, Severity: HIGH, ID: CVE-2005-2277, Last Modified: 2018-08-13T21:47:00Z

References

Broken Link

The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name.

Impacted versions: 2.1.2, 3.2.0

Base Score: 7.5, Severity: HIGH, ID: CVE-2005-2716, Last Modified: 2017-07-11T01:32:00Z

References

Patch Patch Exploit Exploit Exploit

The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.

Impacted versions: *

Base Score: 7.2, Severity: HIGH, ID: CVE-2005-1294, Last Modified: 2016-10-18T03:18:00Z

References

Patch

Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share.

Impacted versions: 2.0, 2.1, 3.1, 2.0.1, 2.3.0, 2.0.2, 3.0, 2.1.2, 2.1.1, 3.2.0

Base Score: 7.5, Severity: HIGH, ID: CVE-2005-2250, Last Modified: 2008-09-05T20:51:00Z

References

Patch Vendor Advisory Patch

USAGE: Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.