Unrated severityNVD Advisory· Published Nov 7, 2008· Updated Apr 23, 2026
CVE-2008-4997
CVE-2008-4997
Description
dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage.
Affected products
1- cpe:2.3:a:pilot-qof:datafreedom-perl:0.1.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.