CVE-2006-2366 - ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session

Back Back to CVE browser

LOW

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session

Published May 15, 2006

2.6

LOW

CVSS 2.0

EPSS 1.21%

Description

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484
x_refsource_MISC
http://secunia.com/advisories/20302
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17921
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2367
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26686
vdb-entryx_refsource_XF

Link	Providers	Tags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484		x_refsource_MISC
http://secunia.com/advisories/20302		third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17921		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2367		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26686		vdb-entryx_refsource_XF