Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
1.2
CVSSv2

CVE-2006-1695

Published: 11/04/2006 Updated: 20/07/2017
CVSS v2 Base Score: 1.2 | Impact Score: 2.9 | Exploitability Score: 1.9
VMScore: 107
Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Subscribe to Fbida

Vulnerability Summary

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID].

Vulnerable Product Search on Vulmon Subscribe to Product

fbida fbida 2.01

fbida fbida 2.02

fbida fbida 2.03

Vendor Advisories

Debian CVElist Bug Report Logs: fbgs: uses insecure tempfiles
Debian Bug report logs - #361370 fbgs: uses insecure tempfiles Package: fbi; Maintainer for fbi is Moritz Muehlenhoff <jmm@debianorg>; Source for fbi is src:fbi (PTS, buildd, popcon) Reported by: Jan Braun <janbraun@gmxnet> Date: Sat, 8 Apr 2006 10:03:07 UTC Severity: important Tags: patch, security Found in ver ...
Debian Security Advisories: DSA-1068-1 fbi -- insecure temporary file
Jan Braun discovered that the fbgs script of fbi, an image viewer for the framebuffer environment, creates an directory in a predictable manner, which allows denial of service through symlink attacks For the old stable distribution (woody) this problem has been fixed in version 123woody1 For the stable distribution (sarge) this problem has been ...

References

NVD-CWE-Otherhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361370http://secunia.com/advisories/19559http://www.securityfocus.com/bid/17436http://www.gentoo.org/security/en/glsa/glsa-200604-13.xmlhttp://secunia.com/advisories/19766http://www.debian.org/security/2006/dsa-1068http://secunia.com/advisories/20166http://www.novell.com/linux/security/advisories/2006_19_sr.htmlhttp://secunia.com/advisories/21459http://www.vupen.com/english/advisories/2006/1281https://exchange.xforce.ibmcloud.com/vulnerabilities/25729https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361370https://nvd.nist.govhttps://www.debian.org/security/./dsa-1068
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook