CVE-2005-2277

Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command.

Score

CVSS 2.0 10.0 Critical

Status

Modified - security@debian.org

Published

2005-07-15

Last modified

2024-08-07

Affected products

• Affix (Nokia)

References

• http://affix.sourceforge.net/affix_212_sec.patch
• http://affix.sourceforge.net/affix_320_sec.patch
• http://marc.info/?l=bugtraq&m=112119962704397&w=2
• http://www.debian.org/security/2005/dsa-762
• http://www.digitalmunition.com/DMA%5B2005-0712b%5D.txt
• http://www.securityfocus.com/bid/14232