VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Nov 17, 2008· Updated Apr 23, 2026

CVE-2008-4832

CVE-2008-4832

Description

rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under (1) /var/lock or (2) /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require an unusual scenario in which rc.sysinit is executed other than at boot time.

Affected products

2
  • Rpath/Initscripts2 versions
    cpe:2.3:a:rpath:initscripts:8.12-8.21:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:rpath:initscripts:8.12-8.21:*:*:*:*:*:*:*
    • cpe:2.3:a:rpath:initscripts:8.56.15-0.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.