« Volver al listado

CVE-2005-2250

Estado: ModificadaAlta (7.5)—

Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Nokia — Affix

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-2250",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-07-13T04:00:00.000",
  "references": [
    {
      "url": "http://affix.sourceforge.net/affix_212_sec.patch",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-762",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.digitalmunition.com/DMA%5B2005-0712a%5D.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/14230",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://affix.sourceforge.net/affix_212_sec.patch",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2005/dsa-762",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.digitalmunition.com/DMA%5B2005-0712a%5D.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/14230",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en  Bluetooth FTP client (BTFTP) en Nokia Affix 2.1.2 and 3.2.0 permite que atacantes remotos ejecuten código arbitrario mediante un nombre de fichero largo en un recurso compartido OBEX."
    }
  ],
  "lastModified": "2026-06-16T22:14:32.617",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57AA1BEB-B2F9-4FF0-B606-677C15C3F5AB"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF228751-7CC7-46CC-A2B5-CFE47F6D5A69"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13689EDD-8324-4377-92BF-88F50810D90F"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A53918FB-12AD-42CA-823B-C2830BE99EE3"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0626DDC-4FD6-484D-83CB-92B61CDD053B"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B53EDC5B-8B67-4F93-90C8-17721F02A1CD"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:2.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "509BB72F-0689-46B9-85F1-9B7C4AD7F847"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4075DD71-E0F8-40FF-88FF-11289200743F"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9F504D8-C1BB-47AA-AF41-3AC8ABB17E8F"
            },
            {
              "criteria": "cpe:2.3:a:nokia:affix:3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F15F9E16-A1B4-4B5B-975E-E9969C41B5E2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}