CVE-2008-4553

EUVD-2008-4534
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
qemuqemu
0.9.1-5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
qemu
bookworm
1:7.2+dfsg-7+deb12u7
fixed
bullseye
1:5.2+dfsg-11+deb11u3
fixed
bullseye (security)
1:5.2+dfsg-11+deb11u2
fixed
sid
1:9.1.1+ds-2
fixed
trixie
1:9.1.1+ds-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qemu
dapper
ignored
gutsy
ignored
hardy
ignored
intrepid
not-affected
jaunty
not-affected
karmic
dne
lucid
dne
maverick
dne
natty
dne
oneiric
dne
qemu-kvm
dapper
dne
hardy
dne
intrepid
dne
jaunty
dne
karmic
not-affected
lucid
not-affected
maverick
not-affected
natty
not-affected
oneiric
not-affected
Common Weakness Enumeration
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394
http://dev.gentoo.org/~rbu/security/debiantemp/qemu
http://secunia.com/advisories/32335
http://uvw.ru/report.lenny.txt
http://www.debian.org/security/2008/dsa-1657
http://www.openwall.com/lists/oss-security/2008/10/13/2
http://www.openwall.com/lists/oss-security/2008/10/14/4
http://www.openwall.com/lists/oss-security/2008/10/30/2
http://www.securityfocus.com/bid/30931
https://bugs.gentoo.org/show_bug.cgi?id=235770
https://bugs.gentoo.org/show_bug.cgi?id=235826
https://exchange.xforce.ibmcloud.com/vulnerabilities/44831
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496394
http://dev.gentoo.org/~rbu/security/debiantemp/qemu
http://secunia.com/advisories/32335
http://uvw.ru/report.lenny.txt
http://www.debian.org/security/2008/dsa-1657
http://www.openwall.com/lists/oss-security/2008/10/13/2
http://www.openwall.com/lists/oss-security/2008/10/14/4
http://www.openwall.com/lists/oss-security/2008/10/30/2
http://www.securityfocus.com/bid/30931
https://bugs.gentoo.org/show_bug.cgi?id=235770
https://bugs.gentoo.org/show_bug.cgi?id=235826
https://exchange.xforce.ibmcloud.com/vulnerabilities/44831