DEBIAN-CVE-2006-2366

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2006-2366
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-2366.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2006-2366
Upstream
Published
2006-05-15T16:06:00Z
Modified
2026-09-12T06:47:23Z
Summary
[none]
Details

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session.

References

Affected packages

Debian:12 / libopenobex

Package

Name
libopenobex
Purl
pkg:deb/debian/libopenobex?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-2366.json"

Debian:13 / libopenobex

Package

Name
libopenobex
Purl
pkg:deb/debian/libopenobex?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-2366.json"

Debian:14 / libopenobex

Package

Name
libopenobex
Purl
pkg:deb/debian/libopenobex?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.2-3

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-2366.json"