← All advisories

Unrated severityNVD Advisory· Published Nov 4, 2008· Updated Jun 16, 2026

CVE-2008-4908

CVE-2008-4908

Description

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

Affected products

2

Crossfire/Crossfire2 versions
cpe:2.3:a:crossfire:crossfire:1.11.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:crossfire:crossfire:1.11.0:*:*:*:*:*:*:*
- (no CPE)range: =1.11.0

Patches

Vulnerability mechanics

References

4

www.securityfocus.com/bid/30893nvdPatch
secunia.com/advisories/32487nvdVendor Advisory
bugs.debian.org/cgi-bin/bugreport.cginvd
exchange.xforce.ibmcloud.com/vulnerabilities/44841nvd

News mentions

0

No linked articles in our index yet.