ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*,…

Description

ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2.log, (g) /tmp/nfs_fsstress.udp.3.log, (h) /tmp/nfs_fsstress.tcp.2.log, (i) /tmp/nfs_fsstress.tcp.3.log, and (j) /tmp/nfs_fsstress.sardata temporary files, related to the (1) ftp_setup_vsftp_conf and (2) nfs_fsstress.sh scripts.

Scores

EPSS (exploitation in 30 days)

0.29% · top 78% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.9.

Weakness

• n/a
• CWE-59 (opens in a new tab)All about CWE-59 and its CVEs

Affected products

• n/a

  • affected n/a

References (5)

• http://dev.gentoo.org/~rbu/security/debiantemp/ltp-network-te (opens in a new tab)x_refsource_CONFIRMx_transferred
• [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• http://bugs.debian.org/496411 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://bugs.gentoo.org/show_bug.cgi?id=235770 (opens in a new tab)x_refsource_CONFIRMx_transferred
• ltpnetworktest-multiple-symlink(46566) (opens in a new tab)vdb-entryx_refsource_XFx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2008-4969](https://trackcve.app/badge/CVE-2008-4969.svg)](https://trackcve.app/cve/CVE-2008-4969)

Record last updated 7 Aug 2024, 10:31 UTC.