CVE-2005-2716: High severity Nokia Affix vulnerability
The eventpincoderequest function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device name.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2716?
CVE-2005-2716 is considered to be a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2005-2716?
To fix CVE-2005-2716, you should update your Nokia Affix software to version 3.2.0 or later, or apply the available patches for versions 2.1.2 and 3.2.0.
Who is affected by CVE-2005-2716?
CVE-2005-2716 affects users of Nokia Affix versions 2.1.2 and 3.2.0 that run the btsrv daemon.
What type of vulnerability is CVE-2005-2716?
CVE-2005-2716 is a command injection vulnerability that allows remote attackers to execute arbitrary commands.
What attack vector is associated with CVE-2005-2716?
CVE-2005-2716 can be exploited through Bluetooth device names where shell metacharacters are used.