Zero-friction vulnerability management platform

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Debian Security Advisory DSA 762-1 (affix)

Information

Severity

Severity

Critical

Family

Family

Debian Local Security Checks

CVSSv2 Base

CVSSv2 Base

10.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Vendor Patch

Created

Created

14 years ago

Modified

Modified

5 years ago

Summary

The remote host is missing an update to affix announced via advisory DSA 762-1. Kevin Finisterre discovered two problems in the Bluetooth FTP client from affix, user space utilities for the Affix Bluetooth protocol stack. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2005-2250 A buffer overflow allows remote attackers to execute arbitrary code via a long filename in an OBEX file share. CVE-2005-2277 Missing input sanitising before executing shell commands allow an attacker to execute arbitrary commands as root. The old stable distribution (woody) is not affected by these problems.

Solution

Solution

For the stable distribution (sarge) these problems have been fixed in version 2.1.1-2. For the unstable distribution (sid) these problems have been fixed in version 2.1.2-2. We recommend that you upgrade your affix package. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20762-1

Common Vulnerabilities and Exposures (CVE)