CVE-2006-4493: XBIFF2

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Affected products

• XBIFF2 XBIFF2: version 1.9 only

Published 2006-08-31. Last modified 2026-06-16.