← All advisories

Unrated severityNVD Advisory· Published Nov 18, 2008· Updated Jun 16, 2026

CVE-2008-5146

CVE-2008-5146

Description

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file.

Affected products

2

Erl Wustl/Ctn
cpe:2.3:a:erl_wustl:ctn:3.0.6:*:*:*:*:*:*:*
ctn/add-accession-numbersllm-fuzzy
Range: =3.0.6

Patches

Vulnerability mechanics

References

2

uvw.ru/report.sid.txtnvdExploit
lists.debian.org/debian-devel/2008/08/msg00347.htmlnvd

News mentions

0

No linked articles in our index yet.