CVE-2006-1695: Fbida

Low severity, CVSS 1.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID].

Affected products

• Fbida Fbida: version 2.01 only; version 2.02 only; version 2.03 only

Published 2006-04-11. Last modified 2026-06-16.