Unrated severityNVD Advisory· Published Dec 9, 2008· Updated Jun 16, 2026
CVE-2008-5394
CVE-2008-5394
Description
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
12- bugs.debian.org/332198nvd
- bugs.debian.org/505071nvd
- bugs.debian.org/505271nvd
- osvdb.org/52200nvd
- security.gentoo.org/glsa/glsa-200903-24.xmlnvd
- securityreason.com/securityalert/4695nvd
- www.mandriva.com/security/advisoriesnvd
- www.securityfocus.com/archive/1/498769/100/0/threadednvd
- www.securityfocus.com/bid/32552nvd
- www.ubuntu.com/usn/usn-695-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/47037nvd
- www.exploit-db.com/exploits/7313nvd
News mentions
0No linked articles in our index yet.