CVE-2008-4970

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on...

6.9 Medium

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.

Exploit likelihood

0.39%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.

Record: CVE-2008-4970
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.

Record: CVE-2008-4970
Updated: 2026-11-02

EUVDEUVD-2008-4949 No score

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.

Record: EUVD-2008-4949
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7v6r-j56q-h4mx No score

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on...

runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.

Record: GHSA-7v6r-j56q-h4mx
Weakness: CWE-59
Updated: 2026-11-02

Affected products

lustre lustre-tests

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4970 is a medium vulnerability (CVSS 6.9) in Lustre Lustre-tests, published November 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.

Exploit likelihood

What each source reports

Affected products

History

In short

References