CVE-2008-0665

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite...

3.6 LowFix available

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Exploit likelihood

0.43%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 3.6

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Record: CVE-2008-0665
CVSS 2.0: 3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Record: CVE-2008-0665
Updated: 2026-11-02

EUVDEUVD-2008-0675 No score

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Record: EUVD-2008-0675
Updated: 2026-11-03

GitHub AdvisoriesGHSA-52ch-cf4w-m93w No score

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite...

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Record: GHSA-52ch-cf4w-m93w
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Record: CVE-2008-0665
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-0665 No score

wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on the ipp.$$.tmp temporary file.

Record: DEBIAN-CVE-2008-0665
Updated: 2026-11-02

Affected products

website meta language meta language

Affected packages

Affected packages
Package	Affected	Fixed
`wml` Debian:12	before 2.0.11-3.1	2.0.11-3.1
`wml` Debian:13	before 2.0.11-3.1	2.0.11-3.1
`wml` Debian:14	before 2.0.11-3.1	2.0.11-3.1
`wml` Debian:4.0 From an advisory covering 2 CVEs	before 2.0.11-1etch1, plus listed versions 2.0.11-1	2.0.11-1etch1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0665 is a low vulnerability (CVSS 3.6) in Website Meta Language Meta Language, published February 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in wml 2.0.11-3.1.

References

Show 5 moreShow less