CVE-2008-4406

A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
VendorProductVersion
debianxsabre
0.2.4b:b
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sabre
intrepid
not-affected
hardy
Fixed 0.2.4b-23ubuntu0.8.04.1
released
gutsy
Fixed 0.2.4b-23ubuntu0.7.10.1
released
feisty
ignored
dapper
Fixed 0.2.4b-21ubuntu0.1
released
Common Weakness Enumeration
References
http://bugs.debian.org/433996
http://openwall.com/lists/oss-security/2008/10/01/1
http://osvdb.org/48895
http://www.securityfocus.com/bid/31512
https://exchange.xforce.ibmcloud.com/vulnerabilities/45609
https://exchange.xforce.ibmcloud.com/vulnerabilities/45715
http://bugs.debian.org/433996
http://openwall.com/lists/oss-security/2008/10/01/1
http://osvdb.org/48895
http://www.securityfocus.com/bid/31512
https://exchange.xforce.ibmcloud.com/vulnerabilities/45609
https://exchange.xforce.ibmcloud.com/vulnerabilities/45715