CVE-2006-1695: Undefined Security Weakness

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...

fbida symbolic links problem

fbgs script insecure temporary files creation...

[SA19559] fbida fbgs Insecure Temporary File Creation Vulnerability

TITLE: fbida fbgs Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA19559 VERIFY ADVISORY: http://secunia.com/advisories/19559/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: fbida 2.x http://secunia.com/product/9244/ DESCRIPTION: Jan Braun...