CVE-2006-2366

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-15 · updated 2026-06-16

Description

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session.

Affected products

Openobex: 1.2

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484
http://secunia.com/advisories/20302
http://www.securityfocus.com/bid/17921
https://exchange.xforce.ibmcloud.com/vulnerabilities/26686
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366484
http://secunia.com/advisories/20302
http://www.securityfocus.com/bid/17921
https://exchange.xforce.ibmcloud.com/vulnerabilities/26686

Get alerted when CVE-2006-2366 or the next vulnerability affects your stack