CVE-2005-2277 Information

Description

Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command.

Reference

http://affix.sourceforge.net/affix_212_sec.patch http://affix.sourceforge.net/affix_320_sec.patch http://marc.info/?l=bugtraq&m=112119962704397&w=2 http://www.debian.org/security/2005/dsa-762 http://www.digitalmunition.com/DMA[2005-0712b].txt http://www.securityfocus.com/bid/14232