Skip to content

CVE-2008-5367

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files...

6.9 Medium

CVE-2008-5367 is a medium vulnerability (CVSS 6.9) in Marco D\'itri Ppp-udeb, published December 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 35th percentile. No source names a fixed version.

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Exploit likelihood

0.42%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Record: CVE-2008-5367
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Record: CVE-2008-5367
Updated: 2026-11-02

EUVDEUVD-2008-5344 No score

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Record: EUVD-2008-5344
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xfwg-78fh-5fcq No score

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files...

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Record: GHSA-xfwg-78fh-5fcq
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Record: CVE-2008-5367
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-5367 No score

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file.

Record: DEBIAN-CVE-2008-5367
Updated: 2026-11-02

Affected products

marco d\'itri ppp-udeb

Affected packages

Affected packages
Package	Affected	Fixed
`ppp` Debian:12	All versions, plus listed versions 2.4.9-1+1.12.5.0-1+12.5.0-1+22.5.1-1+12.5.1-1+1~exp1 Show 5 moreShow less 2.5.2-1+12.5.2-1+1.12.5.2-1+1.22.5.2-1+1~exp12.5.2-1+2	None known
`ppp` Debian:13	All versions, plus listed versions 2.5.2-1+12.5.2-1+1.12.5.2-1+1.22.5.2-1+2	None known
`ppp` Debian:14	All versions, plus listed versions 2.5.2-1+12.5.2-1+1.12.5.2-1+1.22.5.2-1+2	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References