CVEvulnerability

CVE-2006-1695

1.2 LOW Published 2006-04-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-04-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
1.2 LOW — AV:L/AC:H/Au:N/C:N/I:P/A:N

Description

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID].

Affected configurations

• fbida fbida 2.01 • fbida fbida 2.02 • fbida fbida 2.03

References