Every CVE Search/ Get API key

CVE-2008-1832

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink...

3.3 LowFix available

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Exploit likelihood

0.28%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.3

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Record
CVE-2008-1832
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Record
CVE-2008-1832
Updated
2026-11-02
EUVDEUVD-2008-1832 No score

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Record
EUVD-2008-1832
Updated
2026-11-03
GitHub AdvisoriesGHSA-38r5-v3qg-5qvg No score

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink...

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Record
GHSA-38r5-v3qg-5qvg
Weakness
CWE-59
Updated
2026-11-02
OSV No score

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Record
CVE-2008-1832
Updated
2026-11-02
OSVDEBIAN-CVE-2008-1832 No score

lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.

Record
DEBIAN-CVE-2008-1832
Updated
2026-11-02
OSVopenSUSE-SU-2024:10364-1 No score

cecilia-2.0.5-282.2 on GA media

These are all security issues fixed in the cecilia-2.0.5-282.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10364-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cecilia
Debian:12
before 2.0.5-2.1
2.0.5-2.1
cecilia
Debian:14
before 2.0.5-2.1, plus listed versions
2.0.2-12.0.5-12.0.5-2
2.0.5-2.1
cecilia
openSUSE:Tumbleweed
before 2.0.5-282.2
2.0.5-282.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1832 is a low vulnerability (CVSS 3.3) in Cecilia, published April 16, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in cecilia 2.0.5-2.1.

References

MoveEnter Open