CVE-2008-4998
** DISPUTED ** postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a...
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.
Exploit likelihood
What each source reports
NVD Score used
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.
- Record
CVE-2008-4998- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.
- Record
CVE-2008-4998- Updated
- 2026-11-02
EUVDEUVD-2008-4977 No score
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.
- Record
EUVD-2008-4977- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c2m7-2r7v-phq7 No score
** DISPUTED ** postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a...
** DISPUTED ** postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid."
- Record
GHSA-c2m7-2r7v-phq7- Weakness
- CWE-59
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4998 is a medium vulnerability (CVSS 6.9) in Twiki, published November 7, 2008. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile.