CVE-2008-4968

NameCVE-2008-4968
DescriptionThe (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium
Debian Bugs496427

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
lmbench (PTS)stretch/non-free3.0-a9-1.3fixed
buster/non-free3.0-a9+debian.1-2fixed
sid/non-free, bullseye/non-free3.0-a9+debian.1-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
lmbenchsource(unstable)3.0-a9-1low496427

Notes

[etch] - lmbench <no-dsa> (Non-free not supported)

Search for package or bug name: Reporting problems