PT-2005-2297 · Affix · Affix Bluetooth Protocol Stack For Linux

Kevin Finisterre · Published 2005-04-24 · Updated 2016-10-18 · CVE-2005-1294

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Affix Bluetooth Protocol Stack for Linux (affected versions not specified)

Description: The issue concerns a potential privilege escalation in the Affix Bluetooth Protocol Stack for Linux. It is related to the affix sock register function, which might allow local users to gain privileges via a socket call with a negative protocol value. This value is used as an array index, potentially leading to unintended behavior.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-1294

Affected Products

Affix Bluetooth Protocol Stack For Linux

References · 5

• 🔥 https://exploit-db.com/exploits/926 · Exploit
• http://affix.sourceforge.net/patch_hci_3_2_0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-1294 · Security Note
• http://digitalmunition.com/DMA%5B2005-0423a%5D.txt · Note
• http://marc.info/?l=bugtraq&m=111445064725591&w=2 · Note