Integer overflow on socket creation. Buffer overflow in btftp client. btsrv/btobex unfiltered shell characters problem. popen() unfiltered shell characters.
vulners.com/securityvulns/securityvulns:doc:8428
vulners.com/securityvulns/securityvulns:doc:9139
vulners.com/securityvulns/securityvulns:doc:9140
vulners.com/securityvulns/securityvulns:doc:9604