Debian Security Advisory DSA 796-1 – Kevin Finisterre reports that affix, a package used to manage bluetooth sessions under Linux, uses the popen call in an unsafe fashion. A remote attacker can exploit this vulnerability to execute arbitrary commands on a vulnerable system.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39817/dsa-796-1.txt
Source: https://packetstormsecurity.com/files/39817/Debian-Linux-Security-Advisory-796-1.html