Every CVE Search/ Get API key

CVE-2008-5394

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows...

7.2 HighPublic exploitFix available

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Exploit likelihood

0.95%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Record
CVE-2008-5394
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Record
CVE-2008-5394
Updated
2026-11-02
EUVDEUVD-2008-5371 No score

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Record
EUVD-2008-5371
Updated
2026-11-03
GitHub AdvisoriesGHSA-5848-87gf-wvqv No score

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows...

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Record
GHSA-5848-87gf-wvqv
Weakness
CWE-59
Updated
2026-11-02
OSV No score

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Record
CVE-2008-5394
Updated
2026-11-02
OSVDEBIAN-CVE-2008-5394 No score

/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.

Record
DEBIAN-CVE-2008-5394
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
shadow
Debian:12
 before 1:4.1.1-6
1:4.1.1-6
shadow
Debian:13
 before 1:4.1.1-6
1:4.1.1-6
shadow
Debian:14
 before 1:4.1.1-6
1:4.1.1-6
shadow
Debian:4.0
 before 1:4.0.18.1-7+etch1, plus listed versions
1:4.0.18.1-7
1:4.0.18.1-7+etch1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBDebian - Symlink In Login Arbitrary File Ownership2008-12-01

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5394 is a high vulnerability (CVSS 7.2) in Debian Shadow, published December 9, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in shadow 1:4.1.1-6.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open