CVE-2006-2366: Openobex

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when overwriting files, which allows user-assisted remote attackers to overwrite dangerous files via an arbitrary destination file name in an OBEX File Transfer session.

Affected products

• Openobex Openobex: version 1.2 only

Published 2006-05-15. Last modified 2026-06-16.