CVE-2006-2366

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session.

🔗 References (8)

• cve@mitrehttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484
• cve@mitrehttp://secunia.com/advisories/20302
• cve@mitrehttp://www.securityfocus.com/bid/17921
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/26686
• af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20302
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/17921
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/26686