Jan Braun

Name of the Vulnerable Software and Affected Versions: fbi package version 2.01-1.4 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID] when the TMPDIR environment variable is not defined. Recommendations: For fbi package version 2.01-1.4, define the TMPDIR environment variable to prevent temporary files from being created in a predictable location, or consider restricting access to the /var/tmp directory to minimize the risk of exploitation.