CVE-2008-6397
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink...
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Exploit likelihood
What each source reports
NVD Score used
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2008-6397- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2008-6397- Updated
- 2026-11-02
EUVDEUVD-2008-6367 No score
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
EUVD-2008-6367- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5rc-2f7j-5xx4 No score
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink...
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
GHSA-r5rc-2f7j-5xx4- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2008-6397- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-6397 No score
rlatex in AlcoveBook sgml2x 1.0.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- Record
DEBIAN-CVE-2008-6397- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sgml2xDebian:11 |
before 1.0.0-11.2 | 1.0.0-11.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-6397 is a medium vulnerability (CVSS 4.4) in Alcovebook Sgml2x, published March 4, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in sgml2x 1.0.0-11.2.
References
lists.debian.org/debian-devel/2008/08/msg00312.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=496368
exchange.xforce.ibmcloud.com/vulnerabilities/44879
securityfocus.com/bid/30963
nvd.nist.gov/vuln/detail/CVE-2008-6397
github.com/advisories/GHSA-r5rc-2f7j-5xx4
security-tracker.debian.org/tracker/CVE-2008-6397