Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command.

This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities :

  - CAN-2005-2250     A buffer overflow allows remote attackers to execute     arbitrary code via a long filename in an OBEX file     share.

  - CAN-2005-2277

    Missing input sanitising before executing shell commands     allow an attacker to execute arbitrary commands as root.

ID	Name	Product	Family	Type	Severity
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical
19225	Debian DSA-762-1 : affix - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2005-2277

critical

Tenable Plugins

critical

critical