CVE-2008-4941

Name	CVE-2008-4941
Description	arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_, (b) /tmp/arb_pids_, (c) /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	496396

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
arb (PTS)	bullseye/non-free	6.0.6-4	fixed
	bookworm/non-free	6.0.6-5	fixed
	sid/non-free, trixie/non-free	6.0.6-8	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
arb	source	(unstable)	0.0.20071207.1-5	low		496396