CVE-2006-2366: ircp_io.c in libopenobex for ircp 1.2, when ircp is run with the -r option, does not prompt the user when o...

Security readout for executives and security teams

This is an old OBEX file-transfer issue in ircp 1.2/libopenobex. When ircp is run in receive mode with the -r option, it may overwrite files without asking. A remote party can influence the destination filename, but the scenario requires user participation in an OBEX transfer session. Exposure is most likely on legacy systems still using ircp 1.2/libopenobex for OBEX file transfer, especially where users receive files from untrusted devices or peers. Treat this as a legacy exposure cleanup item unless ircp/OBEX file transfer is still used with untrusted parties. Business urgency rises if affected systems can overwrite sensitive user or configuration files. Mitigation focus: Identify any systems still using ircp 1.2 or the affected libopenobex package.; Avoid receiving OBEX transfers from untrusted peers with ircp -r.; Restrict OBEX file transfer use to trusted devices and controlled workflows..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.