Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2006-2366
HistoryMay 15, 2006 - 4:06 p.m.

CVE-2006-2366

2006-05-1516:06:00
Debian Security Bug Tracker
security-tracker.debian.org
9

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

75.6%

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session.

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

EPSS

0.005

Percentile

75.6%

Related for DEBIANCVE:CVE-2006-2366