CVE-2008-4966

🗓️ 06 Nov 2008 11:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on temporary files

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2008-4966	6 Nov 200811:00	–	cvelist
EUVD	EUVD-2008-4945	7 Oct 202500:30	–	euvd
NVD	CVE-2008-4966	6 Nov 200815:55	–	nvd
Prion	Code injection	6 Nov 200815:55	–	prion
UbuntuCve	CVE-2008-4966	6 Nov 200815:55	–	ubuntucve

NVD

Node

Source	Link
openwall	www.openwall.com/lists/oss-security/2008/10/30/2
bugs	www.bugs.gentoo.org/show_bug.cgi
uvw	www.uvw.ru/report.lenny.txt
bugs	www.bugs.debian.org/496376
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/44823
dev	www.dev.gentoo.org/~rbu/security/debiantemp/linux-patch-openswan
securityfocus	www.securityfocus.com/bid/30918

Parameter	Position	Path	Description	CWE
/tmp/snap#####	path	/tmp/snap#####	Symlink-based local file overwrite via temporary file /tmp/snap##### used by maysnap	CWE-59
/tmp/nightly#####	path	/tmp/nightly#####	Symlink-based local file overwrite via temporary file /tmp/nightly##### used by maytest	CWE-59

16 Jun 2026 22:58Current

6.4Medium risk

Vulners AI Score6.4

CVSS 26.9

EPSS0.00403