Unrated severityNVD Advisory· Published Nov 5, 2008· Updated Apr 23, 2026
CVE-2008-4936
CVE-2008-4936
Description
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
Affected products
1- cpe:2.3:a:gert_doering:mgetty:1.1.36:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- dev.gentoo.org/~rbu/security/debiantemp/mgetty-faxnvdExploit
- bugs.debian.org/496403nvd
- secunia.com/advisories/33051nvd
- security.gentoo.org/glsa/glsa-200812-08.xmlnvd
- uvw.ru/report.lenny.txtnvd
- www.openwall.com/lists/oss-security/2008/10/30/2nvd
- www.securityfocus.com/bid/30927nvd
- bugs.gentoo.org/show_bug.cginvd
- bugs.gentoo.org/show_bug.cginvd
- exchange.xforce.ibmcloud.com/vulnerabilities/44833nvd
News mentions
0No linked articles in our index yet.