CVE-2008-5152

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink...

6.9 Medium

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Exploit likelihood

0.36%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: CVE-2008-5152
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: CVE-2008-5152
Updated: 2026-11-02

EUVDEUVD-2008-5131 No score

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: EUVD-2008-5131
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wr7g-5v93-63r2 No score

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink...

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: GHSA-wr7g-5v93-63r2
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: CVE-2008-5152
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-5152 No score

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: DEBIAN-CVE-2008-5152
Updated: 2026-11-02

OSVUBUNTU-CVE-2008-5152 No score

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail#####.log or (2) /tmp/inmail#####.stdin temporary file.

Record: UBUNTU-CVE-2008-5152
Updated: 2026-11-02

Affected products

peter s galbraith mh-book

Affected packages

Affected packages
Package	Affected	Fixed
`mh-book` Debian:12	All versions, plus listed versions 200605-2.2200605-2.3200605-3	None known
`mh-book` Debian:13	All versions, plus listed versions 200605-2.3200605-3	None known
`mh-book` Debian:14	All versions, plus listed versions 200605-2.3200605-3	None known
`mh-book` Ubuntu:16.04:LTS	All versions, plus listed versions 200605-1	None known
`mh-book` Ubuntu:18.04:LTS	All versions, plus listed versions 200605-2	None known
`mh-book` Ubuntu:20.04:LTS	All versions, plus listed versions 200605-2	None known
`mh-book` Ubuntu:22.04:LTS	All versions, plus listed versions 200605-2.1200605-2.2	None known
`mh-book` Ubuntu:24.04:LTS	All versions, plus listed versions 200605-2.2	None known
`mh-book` Ubuntu:25.10	All versions, plus listed versions 200605-2.3	None known
`mh-book` Ubuntu:26.10	All versions, plus listed versions 200605-2.3build1200605-3	None known
`mh-book` Ubuntu:26.04:LTS	All versions, plus listed versions 200605-2.3200605-2.3build1	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5152 is a medium vulnerability (CVSS 6.9) in Peter S Galbraith Mh-book, published November 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

Affected packages

History

In short

References