CVE-2005-2716

The eventpincoderequest function in the btsrv daemon btsrv.c in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name...

CVE-2005-2716

The CVE-2005-2716 issue concerns Nokia Affix (btsrv daemon) versions 2.1.2 and 3.2.0, where event_pin_code_request in btsrv.c allows remote command execution by supplying a Bluetooth device name containing shell metacharacters. Public advisories cite remote code execution via unsafe use of popen ...

DMA-2005-0826a.txt

DMA2005-0826a - 'Nokia Affix Bluetooth btsrv poor use of popen' Author: Kevin Finisterre Vendor: http://www-nrc.nokia.com/affix/, http://affix.sourceforge.net Product: 'affix' References: http://www.digitalmunition.com/DMA2005-0826a.txt Description: Affix is a Bluetooth Protocol Stack for Linux...

Nokia Affix Bluetooth multiple vulnerabilities

Integer overflow on socket creation. Buffer overflow in btftp client. btsrv/btobex unfiltered shell characters problem. popen unfiltered shell characters...

DMA[2005-0826a] - 'Nokia Affix Bluetooth btsrv poor use of popen()'

DMA2005-0826a - 'Nokia Affix Bluetooth btsrv poor use of popen' Author: Kevin Finisterre Vendor: http://www-nrc.nokia.com/affix/, http://affix.sourceforge.net Product: 'affix' References: http://www.digitalmunition.com/DMA2005-0826a.txt Description: Affix is a Bluetooth Protocol Stack for Linux...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2277

Affected software: Affix Bluetooth FTP client (BTFTP) used in Nokia Affix 2.1.2 and 3.2.0. Description: CVE-2005-2277 describes a vulnerability where missing input sanitising before executing shell commands allows a remote attacker to run arbitrary commands via shell metacharacters in the filenam...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2250

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

CVE-2005-2250

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

CVE-2005-2250

Buffer overflow in Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share...

CVE-2005-2250

CVE-2005-2250 is a buffer overflow in Nokia Affix Bluetooth FTP client (BTFTP) affecting Affix versions 2.1.2 and 3.2.0, exploitable via a long filename in an OBEX file share to potentially execute arbitrary code. Debian/DSA-762-1 notes the issue as CAN-2005-2250 and CAN-2005-2277, with fixes pro...

DMA-2005-0712b.txt

DMA2005-0712b - 'Nokia Affix Bluetooth btsrv/btobex poor use of system' Author: Kevin Finisterre Vendor: http://www-nrc.nokia.com/affix/, http://affix.sourceforge.net Product: 'affix' References: http://www.digitalmunition.com/DMA2005-0712b.txt Description: Affix is a Bluetooth Protocol Stack for...

Nokia Affix 2.02.13.x - BTSRVBTOBEX Remote Command Execution

Nokia Affix 2.02.13.x - BTSRVBTOBEX Remote Command Execution source: https://www.securityfocus.com/bid/14232/info Nokia Affix btsrv/btobex are reported prone to a remote command execution vulnerability. The issue exists due to a lack of input sanitization that is performed before using...

[Full-disclosure] DMA[2005-0712a] - 'Nokia Affix Bluetooth btftp client buffer overflow'

DMA2005-0712a - 'Nokia Affix Bluetooth btftp client buffer overflow' Author: Kevin Finisterre Vendor: http://www-nrc.nokia.com/affix/, http://affix.sourceforge.net Product: 'affix' References: http://www.digitalmunition.com/DMA2005-0712a.txt Description: Affix is a Bluetooth Protocol Stack for...

[Full-disclosure] MA[2005-0712b] - 'Nokia Affix Bluetooth btsrv/btobex poor use of system()'

DMA2005-0712b - 'Nokia Affix Bluetooth btsrv/btobex poor use of system' Author: Kevin Finisterre Vendor: http://www-nrc.nokia.com/affix/, http://affix.sourceforge.net Product: 'affix' References: http://www.digitalmunition.com/DMA2005-0712b.txt Description: Affix is a Bluetooth Protocol Stack for...

Nokia Affix 2.0/2.1/3.x - BTSRV/BTOBEX Remote Command Execution

source: https://www.securityfocus.com/bid/14232/info Nokia Affix btsrv/btobex are reported prone to a remote command execution vulnerability. The issue exists due to a lack of input sanitization that is performed before using attacker-controlled data in a 'system' call. Because the affected...

btftp.txt

/ - Tools you will probably need: - http://www.digitalmunition.com/setbd-affix.c - KF is one bad mofo /str0ke Remote Nokia Affix btftp client exploit by kflistsatsecnetopsdotcom threat: btftp Affix version: Affix 2.1.1 Wellcome to OBEX ftp. Type ? for help. Mode: Bluetooth SDP: yes ftp open...

Nokia Affix 3.2.0 - btftp Remote Client

Nokia Affix 3.2.0 - btftp Remote Client / - Tools you will probably need: - http://www.digitalmunition.com/setbd-affix.c - KF is one bad mofo /str0ke Remote Nokia Affix btftp client exploit by kflistsatsecnetopsdotcom threat: btftp Affix version: Affix 2.1.1 Wellcome to OBEX ftp. Type ? for help...