CVE-2006-1695 : The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID].

Published 2006-04-11 10:02:00

Updated 2017-07-20 01:30:49

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-1695

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-1695

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
1.2	LOW	AV:L/AC:H/Au:N/C:N/I:P/A:N	1.9	2.9	NIST
Access Vector: Local Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

Products affected by CVE-2006-1695

Fbida » Fbida » Version: 2.01
cpe:2.3:a:fbida:fbida:2.01:*:*:*:*:*:*:*
Matching versions
Fbida » Fbida » Version: 2.02
cpe:2.3:a:fbida:fbida:2.02:*:*:*:*:*:*:*
Matching versions
Fbida » Fbida » Version: 2.03
cpe:2.3:a:fbida:fbida:2.03:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2006-1695

Exploit prediction scoring system (EPSS) score for CVE-2006-1695

CVSS scores for CVE-2006-1695

References for CVE-2006-1695

Products affected by CVE-2006-1695