CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1)...

6.9 MediumFix available

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Exploit likelihood

0.39%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Record: CVE-2008-4960
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Record: CVE-2008-4960
Updated: 2026-11-02

EUVDEUVD-2008-4939 No score

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Record: EUVD-2008-4939
Updated: 2026-11-03

GitHub AdvisoriesGHSA-j48c-73w7-6r6p No score

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1)...

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Record: GHSA-j48c-73w7-6r6p
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Record: CVE-2008-4960
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-4960 No score

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/-tmp.ps and (2) /tmp/bboxx- temporary files.

Record: DEBIAN-CVE-2008-4960
Updated: 2026-11-02

Affected products

dov grobgeld impose\+

Affected packages

Affected packages
Package	Affected	Fixed
`impose+` Debian:12	before 0.2-11.1	0.2-11.1
`impose+` Debian:13	before 0.2-11.1	0.2-11.1
`impose+` Debian:14	before 0.2-11.1	0.2-11.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4960 is a medium vulnerability (CVSS 6.9) in Dov Grobgeld Impose\+, published November 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in impose+ 0.2-11.1.

Exploit likelihood

What each source reports

Affected products

Affected packages

History

In short

References